vendor:
ActiveBar ActiveX Control
by:
shinnai
N/A
CVSS
N/A
Insecure Methods
Unknown
CWE
Product Name: ActiveBar ActiveX Control
Affected Version From: actbar3.ocx version 3.1 and below
Affected Version To: actbar3.ocx version 3.1
Patch Exists: Unknown
Related CWE: Unknown
CPE: Unknown
Platforms Tested: Windows XP Professional SP2 with Internet Explorer 7
Unknown
Data Dynamics ActiveBar ActiveX Control (actbar3.ocx <= 3.1) Multiple Insecure Methods
The exploit overwrites the system.ini file. It is advised to make a copy of the file before running the exploit to avoid any damage. The control is marked as RegKey Safe for Script: True, RegKey Safe for Init: True, Implements IObjectSafety: False, KillBitSet: False.
Mitigation:
Unknown
