Vulnerability Details CVE-2006-6838
Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.028
EPSS Ranking 85.5%
CVSS Severity
CVSS v2 Score 7.5
References
- http://securityreason.com/securityalert/2089
- http://www.infogreg.com/security/misc/rediff-bol-downloader-allows-downloading-and-spawning-arbitary-files.html
- http://www.securityfocus.com/archive/1/455611/100/0/threaded
- http://www.securityfocus.com/bid/21831
- http://securityreason.com/securityalert/2089
- http://www.infogreg.com/security/misc/rediff-bol-downloader-allows-downloading-and-spawning-arbitary-files.html
- http://www.securityfocus.com/archive/1/455611/100/0/threaded
- http://www.securityfocus.com/bid/21831
Products affected by CVE-2006-6838
-
cpe:2.3:a:rediff:bol_downloader_activex_ocx_control:*