CVE-2019-12809

Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for code execution.

Score

CVSS 3.1 8.8 High

Status

Modified - vuln@krcert.or.kr

Published

2019-08-15

Last modified

2024-08-04

Weaknesses

CWE-494

Affected products

• Viewer Activex (Yes24)
• Yes24 Pc Viewer (Yes24)

References

• https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35117