CVE-2011-0925

Related Files

Zero Day Initiative Advisory 11-092

Posted Feb 24, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-092 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco Secure Desktop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within CSDWebInstaller.ocx. The CSDWebInstallerCtrl ActiveX control allows downloading and executing any Cisco-signed executable files. By renaming a Cisco-signed executable file to inst.exe and putting it on a webserver, an attacker can subsequently exploit vulnerabilities in the Cisco-signed executable file remotely.

tags | advisory, remote, arbitrary, vulnerability, activex

systems | cisco

advisories | CVE-2011-0925

SHA-256 | eb25312dad566f7764a802e61affbdeb92e4335282d676ffca797a2babe8c223

Download | Favorite | View