EUVD-2008-6412

Malware in sbrugna...

CVE-2008-6442

CVE-2008-6442 covers an insecure method vulnerability in the Sina Inc. DLoader Class ActiveX Control. The issue allows remote attackers to overwrite arbitrary files using a URL provided as the first parameter to the DonwloadAndInstall method. This is the concrete vulnerability described in the in...

CVE-2008-6442: Undefined Security Weakness

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

新浪DLoader Class ActiveX控件任意文件下载漏洞

知道安全于近期捕获该漏洞的利用代码,在7月份网络上已经出现利用此漏洞的攻击代码.可导致用户在访问到黑客构造的攻击网页后,可能将恶意文件下载到系统安装,并且随着系统启动而执行. Sina UC 目前厂商已经发布新浪网络电视修复版本并且进行强制升级.请用户及时更新软件. UC的用户请继续关注http://www.51uc.com/进行更新. 也可以为clsid：78ABDC59-D8E7-44D3-9A76-9A0918C52B4A设置kill bit. Windows Registry Editor Version 5.00...