The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked safe for scripting, which allows remote attackers to add arbitrary e-mail addresses and domains to the spam blocker whitelist via the (1) AddSenderToWhitelist and (2) AddDomainToWhitelist functions.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Total_access | Earthlink | * | * |