CVE-2009-0389
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 8.8%
exploitation probability
8.8%top 5% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Multiple insecure method vulnerabilities in the Web On Windows (WOW) ActiveX control in WOW ActiveX 2 allow remote attackers to (1) create and overwrite arbitrary files via the WriteIniFileString method, (2) execute arbitrary programs via the ShellExecute method, (3) read from the registry via unspecified vectors, and (4) write to the registry via unspecified vectors. NOTE: vectors 1 and 2 can be used together to execute arbitrary code.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/7910⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.