The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitrary commands via a command line in the first argument to the VCDLaunchAndWait function.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Vcdapilibapi_activex_control | H+h | 9.0.0.57 (including) | 9.0.0.57 (including) |
| Virtual_cd | H+h | 9.0.0.2 (including) | 9.0.0.2 (including) |