CVE-2011-0926: Input Validation
First published: Fri Feb 25 2011(Updated: )
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Desktop |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.zerodayinitiative.com/advisories/ZDI-11-091/
- http://www.vupen.com/english/advisories/2011/0513
- http://www.securitytracker.com/id?1025118
- http://www.securityfocus.com/bid/46536
- http://securityreason.com/securityalert/8105
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65755
- http://www.securityfocus.com/archive/1/516647/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco secure desktop