EUVD-2006-3420

Malware in sbrugna...

CVE-2006-3424

Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-3423: Improper Input Validation

WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file...

CVE-2006-3423

CVE-2006-3423 affects WebEx Downloader ActiveX/Java controls prior to version 2.1.0.0. The vulnerability stems from lack of validation of downloaded components and control parameters (notably GpcUrlRoot and GpcIniFileName), allowing an attacker to supply a configuration file that can lead to DLL ...

CVE-2006-3424: Undefined Security Weakness

Multiple buffer overflows in WebEx Downloader ActiveX Control, possibly in versions before November 2005, allow remote attackers to execute arbitrary code via unspecified vectors...

WebEx Downloader Plug-in Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of the WebEx Downloader Plug-in. Successful exploitation requires that the target user browse to a malicious web page. The specific flaws exists due to the lack of input validation on various ActiveX/Java...