CVE-2020-7874

8.8HIGH

Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerabili

发布于: 9/9/2021更新于: 11/21/2024
在NVD查看在MITRE查看

描述

Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., Ltd allows the attacker to cause an arbitrary file download and execution. This vulnerability is due to incomplete validation of file download URL or file extension.

AI分析AI驱动

受影响产品

tobesoftnexacro
microsoftwindows
-

参考资料