EUVD-2002-0296

Malware in sbrugna...

CVE-2002-0299: Undefined Security Weakness

CNet CatchUp before 1.3.1 allows attackers to execute arbitrary code via a .RVP file that creates a file with an arbitrary extension such as .BAT, which is executed during a scan...

Выполнение кода в CNet Catchup (code execution)

Через файл обновлений RVP можно загрузить и выполнить любые файлы на компьютере клиента...

CNet CatchUp arbitrary code execution

Affected: Catchup 1.3 Vendor: CNET http://catchup.cnet.com/ Risk: medium Background: CNet CatchUp is a generic file scanner application aimed at detecting old versions of installed applications, and as a side-line, viruses, trojans and spyware. It is controlled by .RVP files which specify what...