critical9.3
CVE-2006-3423
WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbit…
Impact
WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webex Communications | Downloader Activexcontrol | Version 2.0.0.7 |
| Webex Communications | Downloader Java | Version 2.0.0.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20956
- http://securitytracker.com/id?1016446
- http://www.osvdb.org/27039
- http://www.osvdb.org/27040
- http://www.securityfocus.com/archive/1/439496/100/0/threaded
- http://www.securityfocus.com/bid/18860
- http://www.vupen.com/english/advisories/2006/2688
- http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456
- http://www.zerodayinitiative.com/advisories/ZDI-06-021.html
- http://xforce.iss.net/xforce/alerts/id/226
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24370
- http://secunia.com/advisories/20956
- http://securitytracker.com/id?1016446
- http://www.osvdb.org/27039
- http://www.osvdb.org/27040
- http://www.securityfocus.com/archive/1/439496/100/0/threaded
- http://www.securityfocus.com/bid/18860
- http://www.vupen.com/english/advisories/2006/2688
- http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456
- http://www.zerodayinitiative.com/advisories/ZDI-06-021.html
- http://xforce.iss.net/xforce/alerts/id/226
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24370