EUVD-2006-2274

Malware in sbrugna...

CVE-2006-2273

The InstallProduct routine in the Verisign VUpdater.Install aka i-Nav ActiveX control does not verify Microsoft Cabinet .CAB files, which allows remote attackers to run an arbitrary executable file...

Design/Logic Flaw

The InstallProduct routine in the Verisign VUpdater.Install aka i-Nav ActiveX control does not verify Microsoft Cabinet .CAB files, which allows remote attackers to run an arbitrary executable file...

CVE-2006-2273

The CVE-2006-2273 entry relates to Verisign’s i-Nav VUpdater.Install ActiveX control. The vulnerability stems from the InstallProduct routine not verifying CAB files, allowing an attacker to have arbitrary code executed in the user’s context when a user visits a malicious page. Affected component...