PT-2005-3753
CVE-2005-2891
·
Published
2005-09-14
·
Updated
2017-07-11
Description by
CVSS 2.0
6.4
MediumMetricsAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
WebArchiveX.dll version 5.5.0.76
Description
The issue allows remote attackers to read or write to arbitrary files. This is achieved via the (1) MakeArchive or (2) MakeArchiveStr methods.
Recommendations
For WebArchiveX.dll version 5.5.0.76, consider disabling the MakeArchive and MakeArchiveStr methods until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾