CVE-2014-2956 ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access co...
HighCVSS 9.3
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of arbitrary programs via a crafted web site.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avg safeguard | <= 18.1.7 | No fix listed |
| avg secure search toolbar | <= 18.1.7 | No fix listed |
References
- VU#960193 third-party-advisory us-government-resource