Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

• S1 – Steal Customer Account Information

EPSS

Score: 0.02797
Percentile: 0.85504

CVSS Scoring

Affected Products

• cpe:2.3:a:rediff:bol_downloader_activex_ocx_control:*:*:*:*:*:*:*:*

← Back to Home