Vulnerability Description
A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Secure Desktop | All versions |
Related Weaknesses (CWE)
References
- http://securityreason.com/securityalert/8105
- http://www.securityfocus.com/archive/1/516647/100/0/threaded
- http://www.securityfocus.com/bid/46536
- http://www.securitytracker.com/id?1025118
- http://www.vupen.com/english/advisories/2011/0513
- http://www.zerodayinitiative.com/advisories/ZDI-11-091/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65755
- http://securityreason.com/securityalert/8105
- http://www.securityfocus.com/archive/1/516647/100/0/threaded
- http://www.securityfocus.com/bid/46536
- http://www.securitytracker.com/id?1025118
- http://www.vupen.com/english/advisories/2011/0513
- http://www.zerodayinitiative.com/advisories/ZDI-11-091/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65755
FAQ
What is CVE-2011-0926?
CVE-2011-0926 is a vulnerability with a CVSS score of 9.3 (HIGH). A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arb...
How severe is CVE-2011-0926?
CVE-2011-0926 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-0926?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Secure Desktop.