PT-2005-3723 · Rediff+1 · Rediff Bol+3

Published 2005-09-08 · Updated 2024-02-14 · CVE-2005-2858

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Rediff Bol version 7.0

Description The issue allows remote attackers to read the Windows Address Book. This is achieved via the FullAddressBook method of the Fetch.FetchContact.1 ActiveX control, which is part of the Fetch.dll component.

Recommendations For Rediff Bol version 7.0, consider disabling the Fetch.FetchContact.1 ActiveX control to prevent exploitation until a patch is available. Restrict access to the FullAddressBook method to minimize the risk of unauthorized address book access.

Exploit

Fix

Related Identifiers

CVE-2005-2858

Affected Products

Fetch.Fetchcontact.1 Activex Control

Fetch.Dll

Rediff Bol

Windows

References · 3

• 🔥 http://infogreg.com/security/im/rediff-bol-7-exposes-wab.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-2858 · Security Note
• http://secunia.com/advisories/16685 · Vendor Advisory