VULNERABILITY INTELLIGENCE

CVE-2006-6838

CVSS score7.5 HIGH
EPSS probability2.51%
CISA KEVNot currently listed
Published2006-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.

Primary references