View Definition
| Definition Id: oval:org.mitre.oval:def:496 | Version: 3 Last Modified: 2011-04-22 | ||
| Title: | Object Packager Dialogue Spoofing Vulnerability | ||
| Description: | Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Status: | ACCEPTED | Reference(s): |
CVE-2006-4692
|
| Platform(s): | Microsoft Windows XP Microsoft Windows Server 2003 |
Product(s): | |
| Definition Synopsis: | |||
|
|||
