A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote malicious users to execute arbitrary code via a request containing "a link to download and a file to execute," possibly involving remote file inclusion.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
baidu soba search bar 5.4 |