CVE-2008-1885 Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download allows remote attackers to download arbitrary code onto a client syst...
MediumCVSS 6.8
EPSS 4.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download allows remote attackers to download arbitrary code onto a client system via a .. (dot dot) in the SkinPath parameter and a .zip URL in the HttpSkin parameter. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cdnetworks download client | All versions | No fix listed |
References
- 20080407 CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities mailing-list
- 29692 third-party-advisory vendor-advisory
- 28666 vdb-entry
- ADV-2008-1186 vdb-entry
- nefficientdload-neffylauncher-dir-traversal(41743) vdb-entry
- 5397 exploit