NVD

Id
2458  
Name
CVE-2008-2551  
Description
The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to "run."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-04  
Modified Date
2011-03-07  
Seq
2008-2551  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
15595 2458 CVE-2008-2551 3926  View
15596 2458 CVE-2008-2551 5732  View
15597 2458 CVE-2008-2551 20080603 [NSG 03-06-2008] C6 Messenger Installation Url DownloaderActiveX Control Remote Download & Execute Exploit  View
15598 2458 CVE-2008-2551 29519  View
15599 2458 CVE-2008-2551 ADV-2008-1733  View
15600 2458 CVE-2008-2551 iconaspa-downloaderactivex-code-execution(42825)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49191 JVNDB-2008-004501 Icona の SpA C6 Messenger の DownloaderActiveX コントロールにおける任意のファイルのダウンロードを強制される脆弱性 Icona の SpA C6 Messenger の DownloaderActiveX コントロール (DownloaderActiveX.ocx) には、任意のファイルのダウンロードおよび実行を強制される脆弱性が存在します。 CVE-2008-2551 32664 CVE-2008-2551 2458 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004501.html 2008-06-04 2012-09-25 View