Description (CNA)
Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download and execute arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kaoni / ezHTTPTrans | affected 1.0.0.70 through 1.0.0.90 |
CWE
CWE-494
References
ADP enrichment
No English description supplied.