CVE-2006-3423: Webex Communications Downloader Activexcontrol

High severity, CVSS 9.3. EPSS: 8.7% chance of exploitation in the next 30 days.

WebEx Downloader ActiveX Control and WebEx Downloader Java before 2.1.0.0 do not validate downloaded components, which allows remote attackers to execute arbitrary code via a website that activates the GpcUrlRoot and GpcIniFileName ActiveX controls to cause the client to download a DLL file.

Affected products

• Webex Communications Downloader Activexcontrol: version 2.0.0.7 only
• Webex Communications Downloader Java: version 2.0.0.9 only

Published 2006-07-07. Last modified 2026-06-16.