Description
The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as "safe for scripting" for Internet Explorer, which allows remote attackers to create or append to arbitrary files.
References (1)
Core 1
Core References
Patch, Third Party Advisory, US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/165022
Scores
EPSS
0.1233
EPSS Percentile
95.8%
Details
Status
published
Products (1)
microsoft/log_sink_class_activex_control
Published
Jul 05, 2005
Tracked Since
Feb 18, 2026