CVE-2011-0925: Input Validation
The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by identifying a Cisco program with a Cisco digital signature and then renaming this program to inst.exe, a different vulnerability than CVE-2010-0589 and CVE-2011-0926.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0925?
CVE-2011-0925 is considered a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2011-0925?
To fix CVE-2011-0925, ensure that you update Cisco Secure Desktop to the latest version provided by Cisco.
What types of attacks can exploit CVE-2011-0925?
CVE-2011-0925 can be exploited by remote attackers to download and execute unauthorized programs on compromised client machines.
Is CVE-2011-0925 present in the latest Cisco Secure Desktop versions?
No, CVE-2011-0925 has been addressed in the updated releases of Cisco Secure Desktop.
What should I do if I suspect I have been attacked via CVE-2011-0925?
If you suspect an attack related to CVE-2011-0925, immediately disconnect from the network, run a security scan, and consider restoring systems from secure backups.