critical10.0
CVE-2006-2324
180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute …
Impact
180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 180solutions | Zango | All versions |
References
- NVD record
- CVE.org record
- http://secdev.zoller.lu/research/zango.htm
- http://securityreason.com/securityalert/890
- http://www.securityfocus.com/archive/1/433566/100/0/threaded
- http://secdev.zoller.lu/research/zango.htm
- http://securityreason.com/securityalert/890
- http://www.securityfocus.com/archive/1/433566/100/0/threaded