CVE-2005-2858

The Fetch.FetchContact.1 ActiveX control Fetch.dll for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method...

CVE-2005-2858

The CVE-2005-2858 issue affects Rediff Bol 7.0 via the Fetch.FetchContact.1 ActiveX control (Fetch.dll). The FullAddressBook method allows remote attackers to read the Windows Address Book, exposing contact information. Root cause is an unsafe FullAddressBook interface in the Fetch.FetchContact.1...

CVE-2005-2858

The Fetch.FetchContact.1 ActiveX control Fetch.dll for Rediff Bol 7.0 allows remote attackers to read the Windows Address Book via the FullAddressBook method...

PT-2005-3723 · Microsoft +1 · Windows +3

Name of the Vulnerable Software and Affected Versions: Rediff Bol version 7.0 Description: The issue allows remote attackers to read the Windows Address Book. This is achieved via the FullAddressBook method of the Fetch.FetchContact.1 ActiveX control, which is part of the Fetch.dll component...

Rediff Bol 7.0 ActiveX information leak

With FullAddressBook method of Fetch.FetchContact.1 ActiveX control it's possible to obtain whole Windows address book...

[Full-disclosure] Rediff Bol 7.0 WAB Contacts

Rediff Bol 7.0 WAB Contacts Affected Program : Rediff Bol 7.0 It is a popular instant messenger from Rediff.com Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability Description : Rediff Bol's ActiveX control Fetch.FetchContact.1 / Fetch.dll allows a...

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure source: https://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerab...

Rediff Bol 7.0 Instant Messenger - ActiveX Control Information Disclosure

source: https://www.securityfocus.com/bid/14740/info Rediff Bol Instant Messenger is prone to an information disclosure vulnerability. A malicious ActiveX control could allow an attacker to obtain the contents of a vulnerable user's Windows Address Book. script var Obj = new...