EUVD-2002-0296

Malware in sbrugna...

Выполнение кода в CNet Catchup (code execution)

Через файл обновлений RVP можно загрузить и выполнить любые файлы на компьютере клиента...

CNet CatchUp arbitrary code execution

Affected: Catchup 1.3 Vendor: CNET http://catchup.cnet.com/ Risk: medium Background: CNet CatchUp is a generic file scanner application aimed at detecting old versions of installed applications, and as a side-line, viruses, trojans and spyware. It is controlled by .RVP files which specify what...