CVE-2006-3423

CVE-2006-3423

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 8.7%
exploitation probability
8.7%top 5% of all CVEs
observed exploitation
nono source reports it
WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file.
Affected products
n/a · n/a
References
http://secunia.com/advisories/20956http://securitytracker.com/id?1016446https://exchange.xforce.ibmcloud.com/vulnerabilities/24370http://www.osvdb.org/27039http://www.osvdb.org/27040http://www.securityfocus.com/archive/1/439496/100/0/threadedhttp://www.securityfocus.com/bid/18860http://www.vupen.com/english/advisories/2006/2688http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456http://www.zerodayinitiative.com/advisories/ZDI-06-021.htmlhttp://xforce.iss.net/xforce/alerts/id/226