Secunia Security Advisory – A vulnerability has been reported in First4Internet XCP’s uninstallation ActiveX control, which potentially can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to the CodeSupport.ocx ActiveX control that is installed via Internet Explorer when the user un-installs the XCP DRM software by visiting the vendor’s website. The ActiveX control is marked safe-for-scripting and supports several potentially dangerous methods like RebootMachine, InstallUpdate, and IsAdministrator. This may be exploited to install arbitrary code on the user’s system. Successful exploitation requires that the user visits a malicious website. The vulnerability is related to: SA17408
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41597/sa17610.txt
Source: https://packetstormsecurity.com/files/41597/Secunia-Security-Advisory-17610.html