Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

COWON America jetAudio JetFlExt.dll ActiveX Control Insecure Method Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. The exploit is not otherwise publicly available or known to be circulating in the wild.

To exploit this issue, an attacker must entice an unsuspecting user to view a maliciously crafted webpage.

UPDATE (August 11, 2008): Symantec has detected active exploit attempts in the wild.

Sample exploit code is available:







 

Privacy Statement
Copyright 2009, SecurityFocus