CVE-2011-0926
N/A
N/A
Summary
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.vupen.com/english/advisories/2011/0513
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65755
- http://www.securityfocus.com/archive/1/516647/100/0/threaded
- http://securityreason.com/securityalert/8105
- http://www.securitytracker.com/id?1025118
- http://www.zerodayinitiative.com/advisories/ZDI-11-091/
- http://www.securityfocus.com/bid/46536
References
- http://www.vupen.com/english/advisories/2011/0513
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65755
- http://www.securityfocus.com/archive/1/516647/100/0/threaded
- http://securityreason.com/securityalert/8105
- http://www.securitytracker.com/id?1025118
- http://www.zerodayinitiative.com/advisories/ZDI-11-091/
- http://www.securityfocus.com/bid/46536
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.