Beveiligingsadvies

CVE-2006-3423

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-07-07 00:00:00
Laatst bijgewerkt 2024-08-07 18:30:33
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file.