← CVE Intelligence

CVE-2020-7850

Douzone ActiveX File Download and Execution Vulnerability PUBLISHED

Description (CNA)

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Affected (CNA)

Vendor / productVersions
DOUZONE ICT GROUP. / NBBDownloader.ocxaffected 1.0.0.13 through 1.0.0.12

CWE

CWE-88

References

ADP enrichment

CVE

No English description supplied.