CVE

Id
32003  
CVE No.
CVE-2008-1886  
Status
Candidate  
Description
The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be used by arbitrary web sites to host exploit code that targets this control.  
Phase
Assigned (20080418)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
345207 32003 CVE-2008-1886 BUGTRAQ:20080407 CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities  View
345208 32003 CVE-2008-1886 URL:http://seclists.org/bugtraq/2008/Apr/0065.html  View
345209 32003 CVE-2008-1886 MILW0RM:5397  View
345210 32003 CVE-2008-1886 URL:http://www.milw0rm.com/exploits/5397  View
345211 32003 CVE-2008-1886 BID:28666  View
345212 32003 CVE-2008-1886 URL:http://www.securityfocus.com/bid/28666  View
345213 32003 CVE-2008-1886 XF:nefficientdownload-keycode-security-bypass(41933)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47655 JVNDB-2008-002965 Joomla! 用のJom Comment コンポーネントにおける SQL インジェクションの脆弱性 Joomla! 用のJom Comment コンポーネントには、SQL インジェクションの脆弱性が存在します。 CVE-2008-1890 32003 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002965.html  View