Vulnerability Description
Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Raonwiz | Dext5 | 2.7 |
| Microsoft | Activex | < 5.0.0.117 |
References
- http://www.dext5.com/page/support/notice_view.aspx?pSeq=26Vendor Advisory
- https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35352Third Party Advisory
- http://www.dext5.com/page/support/notice_view.aspx?pSeq=26Vendor Advisory
- https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35352Third Party Advisory
FAQ
What is CVE-2019-19168?
CVE-2019-19168 is a vulnerability with a CVSS score of 7.8 (HIGH). Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method...
How severe is CVE-2019-19168?
CVE-2019-19168 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-19168?
Check the references section above for vendor advisories and patch information. Affected products include: Raonwiz Dext5, Microsoft Activex.