PT-2006-7435 · Rediff · Rediff Bol Downloader Activex

Gregory R. Panakkal

·

CVE-2006-6838

·

Publicado

2006-12-31

·

Atualizado

2024-02-14

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Rediff Bol Downloader ActiveX (OCX) control (affected versions not specified)
Description: The issue allows remote attackers to execute arbitrary files and obtain sensitive information, such as usernames and pathnames, by providing a URL in the url vbscript parameter.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-6838

Produtos afetados

Rediff Bol Downloader Activex