CVE-2013-5026 - Vulnerability Details - OpenCVE

An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Ni	Lookout

Configuration 1 [-]

OR	cpe:2.3:a:ni:lookout:6.5:::::::*
	cpe:2.3:a:ni:lookout:6.6:::::::*
	cpe:2.3:a:ni:lookout:6.7:::::::*

No data.

References

Link	Providers
http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument
http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument
http://digital.ni.com/public.nsf/websearch/A792DE0703C8108786257B3600506077?OpenDocument

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2013-08-06T18:00:00

Updated: 2024-08-06T16:59:41.248Z

Reserved: 2013-07-31T00:00:00

Link: CVE-2013-5026

Vulnrichment

No data.

NVD

Status : Modified

Published: 2013-08-06T20:55:05.530

Modified: 2024-11-21T01:56:55.647

Link: CVE-2013-5026

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2013-05-20T00:00:00", "descriptions": [{"lang": "en", "value": "An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2013-09-17T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://digital.ni.com/public.nsf/websearch/A792DE0703C8108786257B3600506077?OpenDocument"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2013-5026", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://digital.ni.com/public.nsf/websearch/A792DE0703C8108786257B3600506077?OpenDocument", "refsource": "CONFIRM", "url": "http://digital.ni.com/public.nsf/websearch/A792DE0703C8108786257B3600506077?OpenDocument"}, {"name": "http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument", "refsource": "CONFIRM", "url": "http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument"}, {"name": "http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument", "refsource": "CONFIRM", "url": "http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T16:59:41.248Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://digital.ni.com/public.nsf/websearch/A792DE0703C8108786257B3600506077?OpenDocument"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2013-5026", "datePublished": "2013-08-06T18:00:00", "dateReserved": "2013-07-31T00:00:00", "dateUpdated": "2024-08-06T16:59:41.248Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ni:lookout:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "3633BF4C-623F-48E4-A89B-118A3ACB9D2E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ni:lookout:6.6:*:*:*:*:*:*:*", "matchCriteriaId": "86CD3849-E24D-4115-BB44-93BAB95EA70D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ni:lookout:6.7:*:*:*:*:*:*:*", "matchCriteriaId": "FE1B3D04-F37B-493D-B9C3-3739777EB4FD", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file."}, {"lang": "es", "value": "Un control ActiveX en los archivos lookout650.ocx, lookout660.ocx y lookout670.ocx en Lookout de National Instruments versiones 6.5 hasta 6.7, permite a los atacantes remotos ejecutar c\u00f3digo arbitrario activando la descarga de las llamadas hacia un archivo DLL arbitrario."}], "id": "CVE-2013-5026", "lastModified": "2024-11-21T01:56:55.647", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2013-08-06T20:55:05.530", "references": [{"source": "cve@mitre.org", "url": "http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://digital.ni.com/public.nsf/websearch/A792DE0703C8108786257B3600506077?OpenDocument"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://digital.ni.com/public.nsf/allkb/544407ECC5FEE44086257BCF00735D1F?OpenDocument"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://digital.ni.com/public.nsf/websearch/507DEC9DA57A708186257B3600512623?OpenDocument"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://digital.ni.com/public.nsf/websearch/A792DE0703C8108786257B3600506077?OpenDocument"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}