CVE-2008-5404

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-12-10 · updated 2026-06-16

Description

Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Grid2000 Flexcell Grid Control: 5.7.0.1

References

http://secunia.com/advisories/32829
http://www.securityfocus.com/bid/32443
https://exchange.xforce.ibmcloud.com/vulnerabilities/46809
http://secunia.com/advisories/32829
http://www.securityfocus.com/bid/32443
https://exchange.xforce.ibmcloud.com/vulnerabilities/46809

Get alerted when CVE-2008-5404 or the next vulnerability affects your stack