CVE-2010-1907 The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to discover the username of the client user, and conseq...
MediumCVSS 4.3
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to discover the username of the client user, and consequently determine a pathname to a certain user directory, via a call to the GetUserName method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| consona dynamic agent | All versions | No fix listed |
| consona live assistance | All versions | No fix listed |
| consona subscriber assistance | All versions | No fix listed |
References
- wintercore.com
- VU#602801 patch third-party-advisory us-government-resource
- 20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities mailing-list
- www.wintercore.com exploit