CVE-2014-0771

High

Published: 12/04/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

The BWOCXRUN.BwocxrunCtrl.1 control contains a method named "OpenUrlToBuffer" that takes a URL as a parameter and returns its contents in JavaScript. This method does not validate URLs, allowing access to local files via "file://" URLs.

Risk Assessment

The lack of URL validation poses a risk of unauthorized access to local files and potential data leakage. An attacker could exploit this vulnerability to read any files accessible within the browser session context.

Recommendation

It is recommended to implement URL validation in the control to block access to local files and restrict the ability to open unauthorized URLs. Consider updating or removing the vulnerable control.

Other vulnerabilities in BWOCXRUN.BwocxrunCtrl.1

CVE-2014-0773High
The BWOCXRUN.BwocxrunCtrl.1 control contains a 'CreateProcess' method that is supposed to validate user-supplied commands. However, this validation can be bypassed, allowing for the execution of arbitrary commands, including remote files.

Original NVD description (English source)

The BWOCXRUN.BwocxrunCtrl.1 control contains a method named “OpenUrlToBuffer.” This method takes a URL as a parameter and returns its contents to the caller in JavaScript. The URLs are accessed in the security context of the current browser session. The control does not perform any URL validation and allows “file://” URLs that access the local disk. The method can be used to open a URL (including file URLs) and read file URLs through JavaScript. This method could also be used to reach any arbitrary URL to which the browser has access.