The Alibaba Alipay PTA Module ActiveX control (PTA.DLL) allows remote attackers to execute arbitrary code via a JavaScript function that invokes the Remove method with an invalid index argument, which is used as an offset for a function call.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Alipay_activex_control | Alibaba | * | 2.4.2.471 (including) |