rediff vulnerabilities

Products

• bol downloader activex ocx control 1
• rediffmail 1
• toolbar 1

Latest rediff CVEs

Newest publication first

1. CVE-2019-11836 The Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail content in file storage, persisting after a logout.

   Published 2019-05-09

   Medium·CVSS 4.6 EPSS 0.30%

   The Rediffmail (aka com.rediff.mail.and) application 2.2.6 for Android has cleartext mail content in file storage, persisting after a logout.

2. CVE-2007-1402 The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank argu...

   Published 2007-03-10

   High·CVSS 7.5 EPSS 2.4% PoC

   The Rediff Toolbar 2.0 ActiveX control in redifftoolbar.dll allows remote attackers to cause a denial of service via unspecified manipulations, possibly involving improper initialization or blank arguments.

3. CVE-2006-6838 Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.

   Published 2007-01-03

   High·CVSS 7.5 EPSS 2.5% Public exploit

   Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.