NVD

Id
13404  
Name
CVE-2010-1912  
Description
The SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to bypass intended restrictions on ActiveX execution via "instantiation/free attacks."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-05-12  
Modified Date
2010-05-21  
Seq
2010-1912  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
74170 13404 CVE-2010-1912 http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html  View
74171 13404 CVE-2010-1912 VU#602801  View
74172 13404 CVE-2010-1912 20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities  View
74173 13404 CVE-2010-1912 http://www.wintercore.com/downloads/rootedcon_0day.pdf  View
74174 13404 CVE-2010-1912 consona-sdcwebsecurebase-sec-bypass(58607)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38284 JVNDB-2010-004069 Consona Live Assistance の SdcWebSecureBase インターフェースにおける ActiveX 実行上で制限を回避される脆弱性 Consona Live Assistance、Dynamic Agent および Subscriber Assistance の tgctlcm.dll の SdcWebSecureBase インターフェースには、ActiveX 実行上で制限を回避される脆弱性が存在します。 CVE-2010-1912 44492 CVE-2010-1912 13404 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004069.html 2010-05-12 2012-06-26 View