critical9.8
CVE-2017-5830
Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts.
Impact
Revive Adserver before 4.0.1 allows remote attackers to execute arbitrary code via serialized data in the cookies related to the delivery scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Revive-Adserver | Revive Adserver | through 4.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2017/02/02/3
- http://www.securityfocus.com/bid/95875
- https://www.revive-adserver.com/security/revive-sa-2017-001/
- http://www.openwall.com/lists/oss-security/2017/02/02/3
- http://www.securityfocus.com/bid/95875
- https://www.revive-adserver.com/security/revive-sa-2017-001/