IMBCContents Insecure ActiveX 'Execute()' Method Code Execution Vulnerability

Bugtraq ID:	18848
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 06 2006 12:00AM
Updated:	Jul 06 2006 06:54PM
Credit:	Gyu Tae Park is credited with the discovery of this vulnerability.
Vulnerable:	Muhwa Broadcasting Corp. iMBCContents 2.0 55
Not Vulnerable:	Muhwa Broadcasting Corp. iMBCContents 2.0 59

IMBCContents Insecure ActiveX 'Execute()' Method Code Execution Vulnerability

The iMBCContents ActiveX control is prone to remote code execution.

An attacker could exploit this issue to execute code in the context of the user visiting a malicious web page.

IMBCContents Insecure ActiveX 'Execute()' Method Code Execution Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

IMBCContents Insecure ActiveX 'Execute()' Method Code Execution Vulnerability

Solution:
Munhwa Broadcasting Corp. has reportedly released an updated version of this software. Please see the vendor references for more information.

IMBCContents Insecure ActiveX 'Execute()' Method Code Execution Vulnerability

References:

• Munhwa Broadcasting Corp. (Munhwa Broadcasting Corp.)