First published: Fri Feb 25 2011(Updated: )
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Secure Desktop |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-0926 is rated as high severity due to its potential to allow remote code execution.
To fix CVE-2011-0926, ensure that you update Cisco Secure Desktop to the latest version that addresses this vulnerability.
The potential impacts of CVE-2011-0926 include unauthorized remote execution of code, leading to system compromise.
Users of Cisco Secure Desktop are affected by CVE-2011-0926 due to the vulnerable ActiveX control.
CVE-2011-0926 affects multiple versions of Cisco Secure Desktop, as long as the vulnerable ActiveX control is present.