NVD

Id
13403  
Name
CVE-2010-1911  
Description
The site-locking implementation in the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance relies on a list of server domain names to restrict execution of ActiveX controls, which makes it easier for man-in-the-middle attackers to execute arbitrary code via a DNS hijacking attack.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-05-12  
Modified Date
2010-05-21  
Seq
2010-1911  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74164 13403 CVE-2010-1911 http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html  View
74165 13403 CVE-2010-1911 http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf  View
74166 13403 CVE-2010-1911 VU#602801  View
74167 13403 CVE-2010-1911 20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities  View
74168 13403 CVE-2010-1911 http://www.wintercore.com/downloads/rootedcon_0day.pdf  View
74169 13403 CVE-2010-1911 consona-sdcwebsecurebase-code-exec(58608)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38283 JVNDB-2010-004068 Consona Live Assistance の SdcWebSecureBase インターフェースの site-locking 実装における任意のコードを実行される脆弱性 Consona Live Assistance、Dynamic Agent および Subscriber Assistance の tgctlcm.dll の SdcWebSecureBase インターフェースの site-locking 実装は、サーバドメイン名の一覧に依存し ActiveX コントロールの実行を制限するため、任意のコードを実行される脆弱性が存在します。 CVE-2010-1911 44491 CVE-2010-1911 13403 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004068.html 2010-04-16 2012-06-26 View