CVE-2008-2551

This Metasploit module exploits a vulnerability in Icona SpA C6 Messenger's DownloaderActiveX control to download and execute arbitrary files. It leverages an insecure ActiveX control to achieve remote code execution in the context of the logged-on user.

This exploit leverages an unsafe ActiveX control in C6 Messenger to remotely download and execute arbitrary files. The vulnerability arises from improper validation of the 'propDownloadUrl' and 'propPostDownloadAction' parameters, allowing remote code execution.

This Metasploit module exploits a vulnerability in the Icona SpA C6 Messenger DownloaderActiveX control to download and execute arbitrary files. It leverages an insecure ActiveX control to achieve remote code execution by crafting a malicious HTML page that triggers the download and execution of a payload.