Skip to content
Sign in
Not rated

CVE-2016-9470 Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download

Description

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery/asyncspc.php` was vulnerable to the fairly new Reflected File Download (RFD) web attack vector that enables attackers to gain complete control over a victim's machine by virtually downloading a file from a trusted domain.

Affected products and versions

Product Affected versions Fixed in
Revive Adserver All versions before 3.2.5 and 4.0.0 Versions not published

Other CVEs of Revive Adserver All versions before 3.2.5 and 4.0.0

The 3 CVEs of Revive Adserver All versions before 3.2.5 and 4.0.0 →
CVE-2016-9471 Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection Not rated CVE-2016-9472 Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS Not rated
Track this CVE