Lucene search
HistoryJun 04, 2008 - 11:32 p.m.
CVE-2008-2551
icona spa
c6 messenger
downloaderactivex
remote attack
file download
cve-2008-2551
7 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.953 High
EPSS
Percentile
99.3%
The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to “run.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| icona:instant_messenger | icona instant messenger | eq | 1.0.0.1 |
Related
prion
prion
Code injection
2008-06-04 23:32:00
packetstorm
packetstorm
Icona SpA C6 Messenger Downloader Arbitrary File Download / Execute
2012-02-03 00:00:00
checkpoint_advisories
checkpoint_advisories
malwarebytes
malwarebytes
securityvulns
securityvulns
Microsoft Internet Explorer multiple security vulnerabilities
2009-04-20 00:00:00
7 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.953 High
EPSS
Percentile
99.3%
Related for CVE-2008-2551