Vulnerability in Sina Dloader

CVE-2008-6442

Insecure method vulnerability in Sina Inc. DLoader Class ActiveX Control allows remote attackers to overwrite arbitrary files via a URL in the first parameter to the DonwloadAndInstall method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

EPSS: 0.018 (76.5th percentile) — read the EPSS interpretation.

Affected products

References