Vulnerabilities > CVE-2006-2273 - Remote Buffer Overflow vulnerability in Verisign i-Nav ActiveX Control
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
The InstallProduct routine in the Verisign VUpdater.Install (aka i-Nav) ActiveX control does not verify Microsoft Cabinet (.CAB) files, which allows remote attackers to run an arbitrary executable file.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Nessus
NASL family | Windows |
NASL id | VUPDATER_INSTALL_ACTIVEX_OVERFLOW.NASL |
description | The remote host contains an ActiveX control, |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 21336 |
published | 2006-05-11 |
reporter | This script is Copyright (C) 2006-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/21336 |
title | I-Nav VUpdater.Install ActiveX Buffer Overflow |
References
- http://secunia.com/advisories/20074
- http://securityreason.com/securityalert/878
- http://securitytracker.com/id?1016059
- http://www.osvdb.org/25431
- http://www.securityfocus.com/archive/1/433589/100/0/threaded
- http://www.securityfocus.com/bid/17939
- http://www.vupen.com/english/advisories/2006/1763
- http://www.zerodayinitiative.com/advisories/ZDI-06-014.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26375