CVE-2011-0926: Input Validation
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0926?
CVE-2011-0926 is rated as high severity due to its potential to allow remote code execution.
How do I fix CVE-2011-0926?
To fix CVE-2011-0926, ensure that you update Cisco Secure Desktop to the latest version that addresses this vulnerability.
What are the potential impacts of CVE-2011-0926?
The potential impacts of CVE-2011-0926 include unauthorized remote execution of code, leading to system compromise.
Who is affected by CVE-2011-0926?
Users of Cisco Secure Desktop are affected by CVE-2011-0926 due to the vulnerable ActiveX control.
Is CVE-2011-0926 specific to a certain version of Cisco Secure Desktop?
CVE-2011-0926 affects multiple versions of Cisco Secure Desktop, as long as the vulnerable ActiveX control is present.