The InstallProduct routine in the Verisign VUpdater.Install (aka i-Nav) ActiveX control does not verify Microsoft Cabinet (.CAB) files, which allows remote attackers to run an arbitrary executable file.
References
Configurations
History
No history.
Information
Published : 2006-05-12 00:02
Updated : 2018-10-18 16:38
NVD link : CVE-2006-2273
Mitre link : CVE-2006-2273
CVE.ORG link : CVE-2006-2273
JSON object : View
Products Affected
verisign
- i-nav
CWE