返回 CVE 浏览器

CVE-2004-0586

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0800%

EPSS Percentile28.13th

Published2004年8月6日

Last Modified2026年4月16日

Vulnerability Description

acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, and (3) Download ActiveX methods.

Affected Platforms (CPE)

📦

Ibm

Acprunner

= 1.2.5.0

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=108745652205176&w=2

🔗 http://www-306.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-54588

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/16429

🔗 http://marc.info/?l=bugtraq&m=108745652205176&w=2

🔗 http://www-306.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-54588

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/16429

相关漏洞威胁

CVE-2007-22405.8

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll...

CVE-2007-29285.8

Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before...

CVE-2007-29295.8

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll...

CVE-2004-041810.0

serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow ...