First 4 Internet CodeSupport Uninstallation ActiveX Software Remote Code Execution Vulnerability

Bugtraq ID:	15430
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 15 2005 12:00AM
Updated:	Nov 15 2005 12:00AM
Credit:	Ed Felten disclosed this vulnerability.
Vulnerable:	First 4 Internet CodeSupport
Not Vulnerable:

First 4 Internet CodeSupport Uninstallation ActiveX Software Remote Code Execution Vulnerability

First 4 Internet CodeSupport is susceptible to a remote code execution vulnerability.

The CodeSupport package can be told to download, and then execute arbitrary content from remote Web sites. As it fails to verify that the source of the remote content is from a trusted source, attackers may utilize it to download and execute malicious code from arbitrary sources, facilitating the remote compromise of targeted computers.

First 4 Internet CodeSupport Uninstallation ActiveX Software Remote Code Execution Vulnerability

An exploit is not required.

First 4 Internet CodeSupport Uninstallation ActiveX Software Remote Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

First 4 Internet CodeSupport Uninstallation ActiveX Software Remote Code Execution Vulnerability

References:

• First 4 Internet Home Page (First 4 Internet Ltd.)
  
• Microsoft Security Bulletin MS05-054 (Microsoft)
  
• Sony's Web-Based Uninstaller Opens a Big Security Hole; Sony to Recall Discs (Ed Felten)