CVE-2006-3423 - Vulnerability Details - OpenCVE

WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.13082.

Key SSVC decision points have not yet been added.

Vendors	Products
Webex Communications Subscribe	Downloader Activexcontrol Subscribe Downloader Java Subscribe

Configuration 1 [-]

OR	cpe:2.3:a:webex_communications:downloader_activexcontrol:2.0.0.7:::::::*
	cpe:2.3:a:webex_communications:downloader_java:2.0.0.9:::::::*

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://secunia.com/advisories/20956
http://securitytracker.com/id?1016446
http://www.osvdb.org/27039
http://www.osvdb.org/27040
http://www.securityfocus.com/archive/1/439496/100/0/threaded
http://www.securityfocus.com/bid/18860
http://www.vupen.com/english/advisories/2006/2688
http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456
http://www.zerodayinitiative.com/advisories/ZDI-06-021.html
http://xforce.iss.net/xforce/alerts/id/226
https://exchange.xforce.ibmcloud.com/vulnerabilities/24370

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-07-07T00:00:00

Updated: 2024-08-07T18:30:33.671Z

Reserved: 2006-07-06T00:00:00

Link: CVE-2006-3423

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-07-07T00:05:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-3423

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-20

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-07-06T00:00:00", "descriptions": [{"lang": "en", "value": "WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-18T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2006-2688", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/2688"}, {"name": "1016446", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016446"}, {"name": "20956", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/20956"}, {"name": "20060706 WebEx ActiveX Control DLL Injection", "tags": ["third-party-advisory", "x_refsource_ISS"], "url": "http://xforce.iss.net/xforce/alerts/id/226"}, {"name": "web-conferencing-code-injection(24370)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24370"}, {"name": "20060707 ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/439496/100/0/threaded"}, {"name": "27040", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/27040"}, {"name": "18860", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/18860"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456"}, {"name": "27039", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/27039"}, {"tags": ["x_refsource_MISC"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-021.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-3423", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2006-2688", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/2688"}, {"name": "1016446", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016446"}, {"name": "20956", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/20956"}, {"name": "20060706 WebEx ActiveX Control DLL Injection", "refsource": "ISS", "url": "http://xforce.iss.net/xforce/alerts/id/226"}, {"name": "web-conferencing-code-injection(24370)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24370"}, {"name": "20060707 ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/439496/100/0/threaded"}, {"name": "27040", "refsource": "OSVDB", "url": "http://www.osvdb.org/27040"}, {"name": "18860", "refsource": "BID", "url": "http://www.securityfocus.com/bid/18860"}, {"name": "http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456", "refsource": "CONFIRM", "url": "http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456"}, {"name": "27039", "refsource": "OSVDB", "url": "http://www.osvdb.org/27039"}, {"name": "http://www.zerodayinitiative.com/advisories/ZDI-06-021.html", "refsource": "MISC", "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-021.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T18:30:33.671Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2006-2688", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/2688"}, {"name": "1016446", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016446"}, {"name": "20956", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/20956"}, {"name": "20060706 WebEx ActiveX Control DLL Injection", "tags": ["third-party-advisory", "x_refsource_ISS", "x_transferred"], "url": "http://xforce.iss.net/xforce/alerts/id/226"}, {"name": "web-conferencing-code-injection(24370)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24370"}, {"name": "20060707 ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/439496/100/0/threaded"}, {"name": "27040", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/27040"}, {"name": "18860", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/18860"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456"}, {"name": "27039", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/27039"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-021.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-3423", "datePublished": "2006-07-07T00:00:00", "dateReserved": "2006-07-06T00:00:00", "dateUpdated": "2024-08-07T18:30:33.671Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:webex_communications:downloader_activexcontrol:2.0.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "5B317345-C51E-4F2D-B6BF-035F70101E12", "vulnerable": true}, {"criteria": "cpe:2.3:a:webex_communications:downloader_java:2.0.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "D5D34608-D541-4E91-9075-550F704E6AE0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file."}, {"lang": "es", "value": "WebEx Downloader ActiveX Control y WebEx Downloader Java anteriores a 2.1.0.0 no validan los componentes descargados, lo cual permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de sitios web que activan los controles ActiveX GpcUrlRoot y GpcIniFileName haciendo que el cliente se descargue un archivos DLL."}], "evaluatorSolution": "Upgrade to version 2.1.0.0.", "id": "CVE-2006-3423", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2006-07-07T00:05:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/20956"}, {"source": "cve@mitre.org", "url": "http://securitytracker.com/id?1016446"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/27039"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/27040"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/439496/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/18860"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/2688"}, {"source": "cve@mitre.org", "url": "http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-021.html"}, {"source": "cve@mitre.org", "url": "http://xforce.iss.net/xforce/alerts/id/226"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24370"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/20956"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securitytracker.com/id?1016446"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/27039"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/27040"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/439496/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/18860"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2006/2688"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.webex.com/lp/security/ActiveAdv.html?TrackID=123456"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-06-021.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://xforce.iss.net/xforce/alerts/id/226"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24370"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}