OSVDB ID: 49047

Title: LiveUpdate UpdateEngine ActiveX (LiveUpdate16.DLL) ApplyPatch Method Arbitrary Program Execution

Info

Disclosure

Sep 30, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access, Context Dependent
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public, Exploit Commercial
Disclosure: Uncoordinated Disclosure
OSVDB: Web Related

Solution

Products

Unknown or Incomplete

References

CVE ID: 2008-4472 (see also: NVD)
Milw0rm: 6630
Exploit Database: 6630
VUPEN Advisory: ADV-2008-2704
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-09/0351.html
Other Advisory URL: http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html
Generic Exploit URL: http://www.saintcorporation.com/cgi-bin/exploit_info/autodesk_liveupdate_applypatch

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/49047