Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2006-5658
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-5658

Description:
BlooMooWeb ActiveX control (AidemATL.dll) allows remote attackers to (1) download arbitrary files via a URL in the bstrUrl parameter to the BW_DownloadFile method, (2) execute arbitrary local files via a file path in the bstrParams parameter to the BW_LaunchGame method, and (3) delete arbitrary files via a file path in the filePath parameter to the BW_DeleteTempFile method.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/29968
  http://xforce.iss.net/xforce/xfdb/29997

SREASON
  http://securityreason.com/securityalert/1808

SAID
  Secunia Advisory: SA22666

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/450144/100/0/threaded

BID
  20827


Return to the previous page.