CVE-2008-1700

Published: Apr 8, 2008Modified: Apr 23, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which opens a separate window for each directive.

Affected (1)

Products: Interwoven: Worksite Web

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Interwoven Worksite Web	Up to 8.2

Related CWEs

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (4)

http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf

Source: cve@mitre.org

Broken LinkExploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/41757

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Broken LinkExploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/41757

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.