high7.5
CVE-2005-1045
OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute…
Impact
OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Centrinity | Centrinity Firstclass Desktop Client | Version 8.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111323587931293&w=2
- http://secunia.com/advisories/14898/
- http://securitytracker.com/id?1013665
- http://www.osvdb.org/15356
- http://www.securityfocus.com/bid/13079
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20032
- http://marc.info/?l=bugtraq&m=111323587931293&w=2
- http://secunia.com/advisories/14898/
- http://securitytracker.com/id?1013665
- http://www.osvdb.org/15356
- http://www.securityfocus.com/bid/13079
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20032