Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-0926
HistoryFeb 25, 2011 - 6:00 p.m.

CVE-2011-0926

2011-02-2518:00:00
CWE-20
[email protected]
web.nvd.nist.gov
24
cisco
secure desktop
activex control
csdwebinstaller.ocx
remote code execution
spoofing
installation process
vulnerability

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.876 High

EPSS

Percentile

98.6%

JSON

A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.

Related

prion 3
cvelist 2
securityvulns 4
saint 4
checkpoint_advisories 1
cve 2
zdi 2
kaspersky 1
prion
prion
Code injection
2011-02-25 18:00:00
Code injection
2011-02-28 16:00:00
Design/Logic Flaw
2010-04-15 17:30:00
cvelist
cvelist
CVE-2011-0926
2011-02-25 17:00:00
CVE-2011-0925
2011-02-28 15:00:00
securityvulns
securityvulns
ZDI-11-091: (0day) Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability
2011-02-24 00:00:00
Cisco Secure Desktop ActiveX multiple security vulnerabilities
2011-02-24 00:00:00
Cisco Security Advisory: Cisco Secure Desktop ActiveX Control Code Execution Vulnerability
2010-04-19 00:00:00
saint
saint
Cisco Secure Desktop CSDWebInstaller code exec
2011-03-23 00:00:00
Cisco Secure Desktop CSDWebInstaller code exec
2011-03-23 00:00:00
Cisco Secure Desktop CSDWebInstaller code exec
2011-03-23 00:00:00
checkpoint_advisories
checkpoint_advisories
Cisco Secure Desktop CSDWebInstaller Code Execution (CVE-2011-0926)
2011-05-16 00:00:00
cve
cve
CVE-2011-0925
2011-02-28 16:00:00
CVE-2010-0589
2010-04-15 17:30:00
zdi
zdi
(0Day) Cisco Secure Desktop CSDWebInstaller Remote Code Execution Vulnerability
2011-02-28 00:00:00
Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability
2010-04-14 00:00:00
kaspersky
kaspersky
KLA10106 ACE vulnerability in Cisco Secure Desktop
2010-04-15 00:00:00

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.876 High

EPSS

Percentile

98.6%

JSON
Related for CVE-2011-0926
prion3cvelist2securityvulns4saint4checkpoint_advisories1cve2zdi2kaspersky1