NVD

Id
62101  
Name
CVE-2006-3423  
Description
WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-07-06  
Modified Date
2011-03-10  
Seq
2006-3423  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
321507 62101 CVE-2006-3423 1016446  View
321508 62101 CVE-2006-3423 20060707 ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability  View
321509 62101 CVE-2006-3423 18860  View
321510 62101 CVE-2006-3423 ADV-2006-2688  View
321511 62101 CVE-2006-3423 http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456  View
321512 62101 CVE-2006-3423 http://www.zerodayinitiative.com/advisories/ZDI-06-021.html  View
321513 62101 CVE-2006-3423 20060706 WebEx ActiveX Control DLL Injection  View
321514 62101 CVE-2006-3423 web-conferencing-code-injection(24370)  View

Related JVN