{"id":"CVE-2008-2551","published":"2008-06-04T23:00:00Z","modified":"2024-08-07T09:05:30Z","title":"The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 allows remote attackers to force the download and execution of arbitrary files via a URL in the propDownloadUrl parameter with the propPostDownloadAction parameter set to \"run.\"","provenance":"source","from":"CVE.org"},"summary":{"text":"The DownloaderActiveX Control (DownloaderActiveX.ocx) in Icona SpA C6 Messenger 1.0.0.1 is the flawed component and product. An attacker who can reach a user of the affected control, through a crafted URL supplied in the propDownloadUrl parameter with propPostDownloadAction set to \"run\", can force the download and execution of arbitrary files.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:15:48Z"},"cvss":null,"epss":{"score":0.46936,"percentile":0.98825,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2021-08-17","exploitedFirstSeen":"2021-08-17","ransomware":false,"evidence":[{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":1,"pulses":[{"name":"Drive-by download campaign targets Chinese websites, experiments with exploits","url":"https://otx.alienvault.com/pulse/5a8f9491b0ea9c41ea7f5fb1","created":"2018-02-23"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.vupen.com/english/advisories/2008/1733/references","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://securityreason.com/securityalert/3926","tags":["third-party-advisory","x_refsource_SREASON"]},{"url":"http://secunia.com/advisories/30512","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/29519","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securityfocus.com/archive/1/493019/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42825","tags":["vdb-entry","x_refsource_XF"]},{"url":"https://www.exploit-db.com/exploits/5732","tags":["exploit","x_refsource_EXPLOIT-DB"]}],"techniques":[],"reports":[{"id":"SRC-93c55e10ab45afc37c85","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf","date":null,"mentions":[{"quote":"CVE-2008-2551","start":115960,"end":115973},{"quote":"CVE-2008-2551, 64","start":261094,"end":261111}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2008-2546","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-2546","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":5732,"url":"https://www.exploit-db.com/exploits/5732","title":"C6 Messenger - ActiveX Remote Download and Execute","type":"remote","platform":"windows","date":"2008-06-03","verified":true,"provenance":"source"},{"id":18449,"url":"https://www.exploit-db.com/exploits/18449","title":"Icona SpA C6 Messenger - DownloaderActiveX Control Arbitrary File Download and Execute (Metasploit)","type":"remote","platform":"windows","date":"2012-02-02","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":2,"earliest":"2008-06-03"},"metasploit":[{"name":"Icona SpA C6 Messenger DownloaderActiveX Control Arbitrary File Download and Execute","module":"exploit/windows/browser/c6_messenger_downloaderactivex","type":"exploit","disclosureDate":"2008-06-03","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/c6_messenger_downloaderactivex.rb"}],"first":{"date":"2008-06-03","source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/5732"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/5732"],"flow":[],"timeline":[{"date":"2008-06-03","kind":"exploit-public","label":"First public exploit: Exploit-DB (EDB-5732); later: Metasploit 2008-06-03","url":"https://www.exploit-db.com/exploits/5732","provenance":"source"},{"date":"2008-06-04","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2008-2551","provenance":"source"},{"date":"2021-08-17","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Exploit-DB","daysToKev":null},"priority":{"score":64.3,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1899 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.77,"detail":"percentile 0.9882"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"1 NVD reference tagged Exploit; 2 Exploit-DB entries; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}