Description
WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file.
References
- ADV-2006-2688 vdb-entry
- 1016446 vdb-entry
- 20956 third-party-advisory
- 20060706 WebEx ActiveX Control DLL Injection third-party-advisory
- web-conferencing-code-injection(24370) vdb-entry
- 20060707 ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability mailing-list
- 27040 vdb-entry
- 18860 vdb-entry
- http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456
- 27039 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-06-021.html