CVE-2019-12809
Last modified
CVE-2019-12809 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for code execution.. EPSS estimates a 1.03% chance of exploitation in the next 30 days.
Description
Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for code execution.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Yes24 | Viewer Activex | <= 1.0.327.50126 |
References
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35117Third Party Advisory
- https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35117Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-12809?
How severe is CVE-2019-12809?
How do I fix CVE-2019-12809?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-12803In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.…9.8
- CVE-2019-12804In Hunesion i-oneNet version 3.0.7 ~ 3.0.53 and 4.0.4 ~ 4.0.…5.5
- CVE-2019-12805NCSOFT Game Launcher, NC Launcher2 2.4.1.691 and earlier ver…8.8
- CVE-2019-12806UniSign 2.0.4.0 and earlier version contains a stack-based b…8.8
- CVE-2019-12807Alzip 10.83 and earlier version contains a stack-based buffe…7.8
- CVE-2019-12808ALTOOLS update service 18.1 and earlier versions contains a …7.8
- CVE-2019-1281Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-12810A memory corruption vulnerability exists in the .PSD parsing…
- CVE-2019-12811ActiveX Control in MyBuilder before 6.2.2019.814 allow an at…9.8
- CVE-2019-12812MyBuilder viewer before 6.2.2019.814 allow an attacker to ex…9.8
- CVE-2019-12813An issue was discovered in Digital Persona U.are.U 4500 Fing…
- CVE-2019-12814A Polymorphic Typing issue was discovered in FasterXML jacks…5.9
Are you affected by CVE-2019-12809?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST