CVE-2008-1885

CVE-2008-1885 affects the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) used by CDNetworks Nefficient Download. A directory traversal via .. in the SkinPath parameter and a .zip URL in HttpSkin can enable a remote attacker to download arbitrary code to a client system, with the note tha...