{"id":"CVE-2008-7168","aliases":["EUVD-2008-7127","GHSA-v98p-5p6g-589f"],"status":"published","title":"Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12)...","description":"Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.05647,"percentile":0.93011,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2009-09-08T10:00:00Z","modified":"2026-06-16T23:03:44Z","exploits":[{"source":"exploitdb","id":"EDB-31980","title":"UUSee 2008 - UUUpgrade ActiveX Control 'Update' Method Arbitrary File Download","type":"remote","platform":"windows","date":"2008-06-26","verified":true,"url":"https://www.exploit-db.com/exploits/31980"}],"products":[{"vendor":"uusee","product":"uusee"},{"vendor":"uusee","product":"uuupgrade.ocx"}],"references":[{"url":"http://www.securityfocus.com/bid/29963","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://downloads.securityfocus.com/vulnerabilities/exploits/29963.html","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43428","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-7168"},{"url":"https://github.com/advisories/GHSA-v98p-5p6g-589f"}],"sources":{"cve":[{"id":"CVE-2008-7168","description":"Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009.","status":"published","published":"2009-09-08T10:00:00Z","modified":"2024-08-07T11:56:14.394Z","updated_at":"2026-11-02T14:34:48.505097Z"}],"euvd":[{"id":"EUVD-2008-7127","description":"Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009.","status":"published","published":"2009-09-08T10:00:00Z","modified":"2024-08-07T11:56:14Z","updated_at":"2026-11-03T01:38:33.099197Z"}],"ghsa":[{"id":"GHSA-v98p-5p6g-589f","title":"Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12)...","description":"Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009.","status":"published","published":"2022-05-17T02:09:15Z","modified":"2023-01-27T05:03:15Z","updated_at":"2026-11-02T14:42:12.225813Z"}],"nvd":[{"id":"CVE-2008-7168","description":"Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009.","status":"published","published":"2009-09-08T10:30:01.327Z","modified":"2026-06-16T23:03:44.947Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:32.081314Z"}]}}