Description
eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary commands via a .lnk file.
References
- 15940 third-party-advisory
- 20050706 eRoom Multiple Security Issues mailing-list
Published Jul 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre
eRoom 6.x does not properly restrict files that can be attached, which allows remote attackers to execute arbitrary commands via a .lnk file.