CVE-2010-0589 | BDVDB-2026-41303 Detail

Description#

The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b25d01.shtml
http://www.zerodayinitiative.com/advisories/ZDI-10-072/
http://www.securityfocus.com/bid/39478
https://exchange.xforce.ibmcloud.com/vulnerabilities/57812
http://securitytracker.com/id?1023881

Exploit#

No public exploit known

History#

Version 12010-04-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.