PT-2006-4315 · Cisco · Webex Downloader Activex Control

Published 2006-07-07 · Updated 2017-07-20 · CVE-2006-3424

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebEx Downloader ActiveX Control versions prior to November 2005

Description The issue is related to multiple buffer overflows that could allow remote attackers to execute arbitrary code. The exact vectors used for the attack are not specified.

Recommendations For versions prior to November 2005, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2006-3424

Affected Products

Webex Downloader Activex Control

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-3424 · Security Note
• http://vupen.com/english/advisories/2006/2688 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27786 · Note
• http://secunia.com/advisories/20956 · Note
• http://xforce.iss.net/xforce/alerts/id/226 · Note