EUVD-2008-4033

Malware in sbrugna...

Security feature bypass

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method...

Heap overflow

Heap-based buffer overflow in a certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary code via a long third argument to the CreateURLShortcut method...

Design/Logic Flaw

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to 1 create and read arbitrary registry values via the RegistryValue method, and 2 read arbitrary files via the GetTextFile method...

CVE-2008-4050

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to 1 create and read arbitrary registry values via the RegistryValue method, and 2 read arbitrary files via the GetTextFile method...

CVE-2008-4048

CVE-2008-4048 describes a heap-based buffer overflow in an ActiveX control of the fwRemoteCfg.dll 3.3.3.1 component used by the Friendly Technologies FriendlyPPPoE Client 3.0.0.57. The overflow is triggered by a long third argument to the CreateURLShortcut method, allowing remote attackers to exe...

CVE-2008-4049

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method...

CVE-2008-4049

CVE-2008-4049 affects the Friendly Technologies FriendlyPPPoE Client (version 3.0.0.57) via the ActiveX control fwRemoteCfg.dll version 3.3.3.1. The RunApp method accepts arguments that allow remote attackers to execute arbitrary programs. This vulnerability is described across multiple sources i...

CVE-2008-4050

The CVE-2008-4050 entry concerns a flaw in the ActiveX control fwRemoteCfg.dll (version 3.3.3.1) used by Friendly Technologies’ FriendlyPPPoE Client (v3.0.0.57). The vulnerability allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method and (2) read ar...