CVE-2008-0237

EUVD-2008-0249
The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the insecure SaveFile method.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 96%
Affected Products (NVD)
VendorProductVersion
microsoftrich_textbox_control
6.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://shinnai.altervista.org/exploits/txt/TXT_DZVN8CwCha0I2fI3NeEs.html
http://www.securityfocus.com/bid/27201
https://exchange.xforce.ibmcloud.com/vulnerabilities/39557
https://www.exploit-db.com/exploits/4874
http://shinnai.altervista.org/exploits/txt/TXT_DZVN8CwCha0I2fI3NeEs.html
http://www.securityfocus.com/bid/27201
https://exchange.xforce.ibmcloud.com/vulnerabilities/39557
https://www.exploit-db.com/exploits/4874