← back
CVE-2008-2551

CVE-2008-2551

EPSS 46.9%
The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/5732unverifiedexploitdbwww.exploit-db.com/exploits/18449unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/30512http://securityreason.com/securityalert/3926https://exchange.xforce.ibmcloud.com/vulnerabilities/42825https://www.exploit-db.com/exploits/5732http://www.securityfocus.com/archive/1/493019/100/0/threadedhttp://www.securityfocus.com/bid/29519http://www.vupen.com/english/advisories/2008/1733/references