CVE-2006-5658

The CVE-2006-5658 entry concerns the BlooMooWeb ActiveX control (AidemATL.dll). The connected sources indicate three vulnerable methods: BW_DownloadFile (bstrUrl parameter allows downloading arbitrary files), BW_LaunchGame (bstrParams parameter allows executing arbitrary local files), and BW_Dele...

CVE-2006-5658: Undefined Security Weakness

BlooMooWeb ActiveX control AidemATL.dll allows remote attackers to 1 download arbitrary files via a URL in the bstrUrl parameter to the BWDownloadFile method, 2 execute arbitrary local files via a file path in the bstrParams parameter to the BWLaunchGame method, and 3 delete arbitrary files via a...