EUVD-2006-2511

Malware in sbrugna...

[SA20165] FrontRange iHEAT Host System Access Vulnerability

TITLE: FrontRange iHEAT Host System Access Vulnerability SECUNIA ADVISORY ID: SA20165 VERIFY ADVISORY: http://secunia.com/advisories/20165/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: FrontRange iHEAT 8.x http://secunia.com/product/10124/ DESCRIPTION: mcdaniel...

CVE-2006-2511

CVE-2006-2511 concerns the ActiveX version of FrontRange iHEAT. The vulnerability arises when an authenticated user uploads a file with an extension not associated with an application and selects it via the Open With dialog, potentially allowing execution of arbitrary programs or access to arbitr...

CVE-2006-2511

The ActiveX version of FrontRange iHEAT allows remote authenticated users to run arbitrary programs or access arbitrary files on the host machine by uploading a file with an extension that is not associated with an application, and selecting a file from the "Open With..." dialog...