Toolbar Uninstaller Arbitrary File Download Vulnerability
BID:42918
Info
Toolbar Uninstaller Arbitrary File Download Vulnerability
| Bugtraq ID: | 42918 |
| Class: | Access Validation Error |
| CVE: |
CVE-2009-2963 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 19 2009 12:00AM |
| Updated: | Aug 19 2009 12:00AM |
| Credit: | Decomputeur |
| Vulnerable: |
Decomputeur Toolbar Uninstaller 1.0.2 |
| Not Vulnerable: | |
Discussion
Toolbar Uninstaller Arbitrary File Download Vulnerability
Toolbar Uninstaller is prone to a vulnerability that can allow attackers to download and execute arbitrary files.
Attackers can exploit this issue by enticing a user to visit a malicious update website or URI.
Successful exploits will allow malicious files to be downloaded and run with the privileges of the vulnerable application.
Toolbar Uninstaller 1.0.2 is vulnerable; other versions may also be affected.
Toolbar Uninstaller is prone to a vulnerability that can allow attackers to download and execute arbitrary files.
Attackers can exploit this issue by enticing a user to visit a malicious update website or URI.
Successful exploits will allow malicious files to be downloaded and run with the privileges of the vulnerable application.
Toolbar Uninstaller 1.0.2 is vulnerable; other versions may also be affected.
Exploit / POC
Toolbar Uninstaller Arbitrary File Download Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Toolbar Uninstaller Arbitrary File Download Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].