Vulnerability CVE-2008-7122
Published: 2009-08-31   Modified: 2012-02-12

Description:
Multiple insecure method vulnerabilities in an ActiveX control in (epRegPro.ocx) in Evans Programming Registry Pro allow remote attackers to read and modify sensitive registry keys via the (1) About, (2) CreateKey, (3) DeleteBranch, (4) DeleteKey, (5) DeleteValue, (6) EnumKeys, (7) EnumValues, (8) QueryType, (9) QueryValue, (10) RenameKey, and (11) SetValue methods.

See advisories in our WLB2 database:
Topic
Author
Date
High
Registry Pro (epRegPro.ocx) Remote Insecure Method Exploit
t0pP8uZz
31.08.2009

Type:

CWE-noinfo

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Evansprogramming -> Registry pro 

 References:
http://www.securityfocus.com/bid/28287
http://www.milw0rm.com/exploits/5271
Copyright 2024, cxsecurity.com

 

Back to Top