CVE-2006-6838 | BDVDB-2026-21280 Detail

Description#

Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.infogreg.com/security/misc/rediff-bol-downloader-allows-downloading-and-spawning-arbitary-files.html
http://www.securityfocus.com/archive/1/455611/100/0/threaded
http://securityreason.com/securityalert/2089
http://www.securityfocus.com/bid/21831

Exploit#

No public exploit known

History#

Version 12007-01-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.