CVE-2008-1886 The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote atta...
HighCVSS 7.5
EPSS 6.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be used by arbitrary web sites to host exploit code that targets this control.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cdnetworks download client | All versions | No fix listed |
References
- 20080407 CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities mailing-list
- 28666 vdb-entry
- nefficientdownload-keycode-security-bypass(41933) vdb-entry
- 5397 exploit