high7.5Public exploit code
CVE-2006-6838
Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Rediff Bol Downloader - ActiveX Control Execute Local File2006-12-31 · remote · windows · Verified
Impact
Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rediff | Bol Downloader Activex Ocx Control | All versions |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/2089
- http://www.infogreg.com/security/misc/rediff-bol-downloader-allows-downloading-and-spawning-arbitary-files.html
- http://www.securityfocus.com/archive/1/455611/100/0/threaded
- http://www.securityfocus.com/bid/21831
- http://securityreason.com/securityalert/2089
- http://www.infogreg.com/security/misc/rediff-bol-downloader-allows-downloading-and-spawning-arbitary-files.html
- http://www.securityfocus.com/archive/1/455611/100/0/threaded
- http://www.securityfocus.com/bid/21831