John Smith has discovered a vulnerability in Rising Online Virus Scanner, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the Rising Web Scan Object ActiveX control (OL2005.dll) including the insecure "UpdateEngine()" method. This can be exploited to download and load a malicious library on a user's system.

The vulnerability is confirmed in OL2005.dll version 18.0.0.7. Other versions may also be affected.

Solution
Update to the latest version.
Further details available to Secunia VIM customers

Provided and/or discovered by
John Smith

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/5188

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers