critical10.0Public exploit code
CVE-2007-6493
The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- iMesh 7 - 'IMWebControl' ActiveX Control Code Execution2007-12-17 · remote · windows · Verified
- iMesh 7.1.0.x - 'IMWeb.dll 7.0.0.x' Remote Heap Overflow2007-12-18 · remote · windows · Verified
Impact
The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to the SetHandler method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imesh.Com | Imesh | through 7.1.0.37263 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/40239
- http://retrogod.altervista.org/rgod_imesh.html
- http://secunia.com/advisories/28134
- http://www.securityfocus.com/archive/1/485261/100/0/threaded
- http://www.vupen.com/english/advisories/2007/4240
- http://osvdb.org/40239
- http://retrogod.altervista.org/rgod_imesh.html
- http://secunia.com/advisories/28134
- http://www.securityfocus.com/archive/1/485261/100/0/threaded
- http://www.vupen.com/english/advisories/2007/4240