First 4 Internet CodeSupport Uninstallation ActiveX Software Remote Code Execution Vulnerability

First 4 Internet CodeSupport Uninstallation ActiveX Software Remote Code Execution Vulnerability

First 4 Internet CodeSupport is susceptible to a remote code execution vulnerability.

The CodeSupport package can be told to download, and then execute arbitrary content from remote Web sites. As it fails to verify that the source of the remote content is from a trusted source, attackers may utilize it to download and execute malicious code from arbitrary sources, facilitating the remote compromise of targeted computers.