CVE-2010-1517

Related Files

GIGABYTE Dldrv2 ActiveX Control Unsafe Methods

Posted Jul 16, 2010

Site secunia.com

Secunia Research has discovered some vulnerabilities in GIGABYTE Dldrv2 ActiveX Control, which can be exploited by malicious people to compromise a user's system. The unsafe method "dl()" allows automatically downloading and executing an arbitrary file. Combined usage of the unsafe methods "SetDLInfo()" and "Bdl()" allows automatically downloading an arbitrary file to an arbitrary location on the user's system. GIGABYTE Dldrv2 ActiveX Control version 1.4.206.11 is affected.

tags | advisory, arbitrary, vulnerability, activex

advisories | CVE-2010-1517

SHA-256 | 08c0f290a97fa5c7bda21b8209232dbc8ff81b03dddee78d3ad8e64cdd838050

Download | Favorite | View