Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple insecure method vulnerabilities in the Web On Windows (WOW) ActiveX control in WOW ActiveX 2 allow remote attackers to (1) create and overwrite arbitrary files via the WriteIniFileString method, (2) execute arbitrary programs via the ShellExecute method, (3) read from the registry via unspecified vectors, and (4) write to the registry via unspecified vectors. NOTE: vectors 1 and 2 can be used together to execute arbitrary code.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Eztools-Software Web on Windows ActiveX 'WriteIniFileString/ShellExecute'任意文件重写漏洞
Vulnerability Description
WOW ActiveX 2中的Windows (WOW) ActiveX控件上的web中存在多个不安全方法漏洞。远程攻击者可以(1)借助WriteIniFileString方法，创建和重写任意文件；(2)借助ShellExecute方法，允许任意程序；(3)借助未明向量，从登记簿中读取信息；(4)借助未明向量，写入数据到登记簿。注意：向量1和向量2一起被使用时，攻击者可以执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A