Vulnerabilities > CVE-2006-2273 - Remote Buffer Overflow vulnerability in Verisign i-Nav ActiveX Control
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
The InstallProduct routine in the Verisign VUpdater.Install (aka i-Nav) ActiveX control does not verify Microsoft Cabinet (.CAB) files, which allows remote attackers to run an arbitrary executable file.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Nessus
| NASL family | Windows |
| NASL id | VUPDATER_INSTALL_ACTIVEX_OVERFLOW.NASL |
| description | The remote host contains an ActiveX control, |
| last seen | 2020-06-01 |
| modified | 2020-06-02 |
| plugin id | 21336 |
| published | 2006-05-11 |
| reporter | This script is Copyright (C) 2006-2018 Tenable Network Security, Inc. |
| source | https://www.tenable.com/plugins/nessus/21336 |
| title | I-Nav VUpdater.Install ActiveX Buffer Overflow |
References
- http://secunia.com/advisories/20074
- http://securityreason.com/securityalert/878
- http://securitytracker.com/id?1016059
- http://www.osvdb.org/25431
- http://www.securityfocus.com/archive/1/433589/100/0/threaded
- http://www.securityfocus.com/bid/17939
- http://www.vupen.com/english/advisories/2006/1763
- http://www.zerodayinitiative.com/advisories/ZDI-06-014.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26375