Vulnerability in Microsoft Log Sink Class Activex Control

CVE-2005-0360

The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files.

EPSS: 0.123 (95.8th percentile) — read the EPSS interpretation.

Affected products

References

  • cret@cert.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)