CVE-2008-7168: Uusee

High severity, CVSS 9.3. EPSS: 5.6% chance of exploitation in the next 30 days.

Insecure method vulnerability in the UUSee UUUpgrade ActiveX control (UUUpgrade.ocx 3.0.2.12) allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method, as exploited in the wild in June 2009.

Affected products

• Uusee Uusee: version 4.0.0.32_2008 only
• Uusee Uuupgrade.ocx: version 3.0.2.12 only

Published 2009-09-08. Last modified 2026-06-16.