AVG 'ScriptHelperApi' ActiveX Remote Code Execution

The remote host is running a version of AVG Secure Search toolbar / AVG Safeguard, prior to version 18.1.7. The AVG ScriptHelperApi ActiveX control distributed with the software is affected by a remote code execution vulnerability. The installed ActiveX control fails to properly enforce...

CVE-2014-2956

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of...

CVE-2014-2956

CVE-2014-2956 affects AVG Secure Search toolbar (before 18.1.7.598) and AVG Safeguard (before 18.1.7.644). The ScriptHelperApi ActiveX control does not enforce domain-based access control for its methods, enabling remote attackers to trigger downloading/execution of arbitrary code via a crafted w...

PT-2014-4981

Name of the Vulnerable Software and Affected Versions AVG Secure Search toolbar versions prior to 18.1.7.598 AVG Safeguard versions prior to 18.1.7.644 Description The issue concerns the ScriptHelperApi in the AVG ScriptHelper ActiveX control, which does not implement domain-based access control...

CVE-2014-2956: Undefined Security Weakness

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of...