CVE-2005-1045 | BDVDB-2026-9264 Detail

Description#

OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.osvdb.org/15356
http://www.securityfocus.com/bid/13079
http://securitytracker.com/id?1013665
http://secunia.com/advisories/14898/
http://marc.info/?l=bugtraq&m=111323587931293&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/20032

Exploit#

No public exploit known

History#

Version 12005-04-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.