SecuritySpace - CVE-2009-0389

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2009-0389

Description: Multiple insecure method vulnerabilities in the Web On Windows (WOW) ActiveX control in WOW ActiveX 2 allow remote attackers to (1) create and overwrite arbitrary files via the WriteIniFileString method, (2) execute arbitrary programs via the ShellExecute method, (3) read from the registry via unspecified vectors, and (4) write to the registry via unspecified vectors. NOTE: vectors 1 and 2 can be used together to execute arbitrary code.

Test IDs: 1.3.6.1.4.1.25623.1.0.800224

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2009-0389
BugTraq ID: 33515
http://www.securityfocus.com/bid/33515
https://www.exploit-db.com/exploits/7910
XForce ISS Database: wow-writeinifilestring-code-execution(48337)
https://exchange.xforce.ibmcloud.com/vulnerabilities/48337

CVE ID:	CVE-2009-0389
Description:	Multiple insecure method vulnerabilities in the Web On Windows (WOW) ActiveX control in WOW ActiveX 2 allow remote attackers to (1) create and overwrite arbitrary files via the WriteIniFileString method, (2) execute arbitrary programs via the ShellExecute method, (3) read from the registry via unspecified vectors, and (4) write to the registry via unspecified vectors. NOTE: vectors 1 and 2 can be used together to execute arbitrary code.
Test IDs:	1.3.6.1.4.1.25623.1.0.800224
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0389 BugTraq ID: 33515 http://www.securityfocus.com/bid/33515 https://www.exploit-db.com/exploits/7910 XForce ISS Database: wow-writeinifilestring-code-execution(48337) https://exchange.xforce.ibmcloud.com/vulnerabilities/48337