| Package | Affected versions | Patched versions |
|---|---|---|
| downloader activexcontrol | = 2.0.0.7 | |
| downloader java | = 2.0.0.9 |
WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free