Approved changes feed: RSS · Atom

cpe:2.3:a:cdnetworks:download_client:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCdnetworks (8f2bf5f1-8cd6-52a8-8c8d-700e879fd7bb)
ProductDownload Client (f80a3748-5023-5cb9-9e81-b84972070e9a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1886 vulnerable 2026-06-08 04:50:22.159130 Details available
The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be used by arbitrary web sites to host exploit code that targets this control.
Published: 2008-04-18T15:00:00.000Z
Updated: 2024-08-07T08:40:59.543Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1885 vulnerable 2026-06-08 04:50:22.158752 Details available
Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download allows remote attackers to download arbitrary code onto a client system via a .. (dot dot) in the SkinPath parameter and a .zip URL in the HttpSkin parameter. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Published: 2008-04-18T15:00:00.000Z
Updated: 2024-08-07T08:40:59.575Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.