Improper input validation in Afterlogic Mailbee Objects

CVE-2008-0631

Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files via the SaveToDisk method, or (2) modify files via the AddStringToFile method.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.036 (88.1th percentile) — read the EPSS interpretation.

Affected products

Afterlogic Mailbee_objects — versions 5.5
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)