CVE-2005-3693 - The AxWebRemoveCtrl ActiveX control for uninstalling the SunnComm MediaMax DRM allows remote attacke

CVE-2005-3693

Summary

The AxWebRemoveCtrl ActiveX control for uninstalling the SunnComm MediaMax DRM allows remote attackers to download and execute arbitrary code, a similar vulnerability to CVE-2005-3650.

References

http://secunia.com/advisories/17639
http://www.freedom-to-tinker.com/?p=931
http://www.osvdb.org/20950
http://www.vupen.com/english/advisories/2005/2493

Vulnerable Configurations

cpe:2.3:a:sunncomm_mediamax:axwebremovectrl:*:*:*:*:*:*:*:*
cpe:2.3:a:sunncomm_mediamax:axwebremovectrl:*:*:*:*:*:*:*:*

CVSS

Base:	9.3 (as of 08-03-2011 - 02:26)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:M/Au:N/C:C/I:C/A:C

refmap via4

misc	http://www.freedom-to-tinker.com/?p=931
osvdb	20950
secunia	17639
vupen	ADV-2005-2493

Last major update

08-03-2011 - 02:26

Published

19-11-2005 - 01:03

Last modified

08-03-2011 - 02:26