CVE-2011-0926

Related Files

Zero Day Initiative Advisory 11-091

Posted Feb 24, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-091 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Secure Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within CSDWebInstaller.ocx ActiveX control. The vulnerable Cisco-signed ActiveX control verifies the signing authority names in the certificate chain but fails to properly verify the digital signature of an executable file that is downloaded and executed by the Cisco Secure Desktop installation process. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the browser.

tags | advisory, remote, arbitrary, activex

systems | cisco

advisories | CVE-2011-0926

SHA-256 | aa42da94f61aa15c9fbe1d3b89ebac14865a9cc7a35d7077701ed758089765f6

Download | Favorite | View