Code injection

180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com...

CVE-2006-2324

180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com...

CVE-2006-2324

The CVE-2006-2324 entry concerns 180solutions Zango adware that downloads “required Adware components” without integrity/authenticity checks, enabling a context-dependent attacker to execute arbitrary code by subverting DNS resolution of static.zangocash.com. The core issue is a lack of verificat...

Zango Adware code execution

The integrity of downloaded components is not checked...

[Full-disclosure] [TZO-042006] Insecure Auto-Update and File execution

Zango Adware - Insecure Auto-Update and File execution Reference : TZO-042006-Zango Author : Thierry Zoller Advisory : http://secdev.zoller.lu/research/zango.htm Shameless Plug : I would like to take the opportunity to invite you to the Security Conference known as "Hack.lu 2006" in the Grand-Duc...