CVE-2009-0389

no score yetEPSS 8.8%

Multiple insecure method vulnerabilities in the Web On Windows (WOW) ActiveX control in WOW ActiveX 2 allow remote attackers to (1) create and overwrite arbitrary files via the WriteIniFileString method, (2) execute arbitrary programs via the ShellExecute method, (3) read from the registry via unspecified vectors, and (4) write to the registry via unspecified vectors. NOTE: vectors 1 and 2 can be used together to execute arbitrary code.

EPSS: 8.8% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
Published: 2009-02-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

eztools-software:web_on_windows_activex

References

http://www.securityfocus.com/bid/33515
https://exchange.xforce.ibmcloud.com/vulnerabilities/48337
https://www.exploit-db.com/exploits/7910
http://www.securityfocus.com/bid/33515
https://exchange.xforce.ibmcloud.com/vulnerabilities/48337

Check your stack JSON