CVE-2008-6442

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Sina DLoader Class - ActiveX Control 'DonwloadAndInstall' Method Arbitrary File Download2008-07-14 · remote · windows · Verified

Impact

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

References

• NVD record
• CVE.org record
• http://downloads.securityfocus.com/vulnerabilities/exploits/30223.html
• http://www.securityfocus.com/bid/30223
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43881
• http://downloads.securityfocus.com/vulnerabilities/exploits/30223.html
• http://www.securityfocus.com/bid/30223
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43881