CVE-2006-6838: Undefined Security Weakness

Rediff Bol Downloader ActiveX OCX control allows remote attackers to execute arbitrary files, and obtain sensitive information usernames and pathnames, via a URL in the url vbscript parameter...