Vulnerability Description
Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution by rebooting the victim’s PC.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kaoni | Ezhttptrans | <= 1.0.0.70 |
| Microsoft | Windows | - |
Related Weaknesses (CWE)
References
- http://www.kaoni.com/Vendor Advisory
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35428Third Party Advisory
- http://www.kaoni.com/Vendor Advisory
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35428Third Party Advisory
FAQ
What is CVE-2020-7812?
CVE-2020-7812 is a vulnerability with a CVSS score of 7.8 (HIGH). Ezhttptrans.ocx ActiveX Control in Kaoni ezHTTPTrans 1.0.0.70 and prior versions contain a vulnerability that could allow remote attacker to download arbitrary file by setting the arguments to the act...
How severe is CVE-2020-7812?
CVE-2020-7812 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7812?
Check the references section above for vendor advisories and patch information. Affected products include: Kaoni Ezhttptrans, Microsoft Windows.