← Database

CVE-2006-3423

CRITICAL CVSS: 9.3 Published: 2006-07-07 Modified: 2026-06-16

Description

WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file.

Affected Platforms

Webex Communications Downloader JavaWebex Communications Downloader Activexcontrol

Weakness Type

CWE-20

References