CVE-2011-0926 A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arb...
HighCVSS 9.3
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure desktop | All versions | No fix listed |
References
- 8105 third-party-advisory
- 20110223 ZDI-11-091: (0day) Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability mailing-list
- 46536 vdb-entry
- 1025118 vdb-entry
- ADV-2011-0513 vdb-entry
- www.zerodayinitiative.com
- cisco-securedesktop-activex-code-execution(65755) vdb-entry