CVE-2006-6838

Rediff Bol Downloader ActiveX - RCE

Title source: llm

Description

Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Gregory R. Panakkal · htmlremotewindows

https://www.exploit-db.com/exploits/3058

View Code ZIP pw:eip

References (4)

[Exploit, URL Repurposed] http://www.infogreg.com/security/misc/rediff-bol-downloader-allows-downloading-and-spawning-arbitary-files.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/455611/100/0/threaded

[Third Party Advisory] http://securityreason.com/securityalert/2089

[Exploit] http://www.securityfocus.com/bid/21831

Scores

EPSS 0.0338

EPSS Percentile 87.4%

Details

Status published

Products (1)

rediff/bol_downloader_activex_ocx_control

Published Dec 31, 2006

Tracked Since Feb 18, 2026