CVE-2010-1913 | BDVDB-2026-41676 Detail

Description#

The default configuration of pluginlicense.ini for the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance, when downloaded from a server operated by Telefonica or possibly other companies, contains an incorrect DNS whitelist that includes the DNS hostnames of home computers of many persons, which allows remote attackers to bypass intended restrictions on ActiveX execution by hosting an ActiveX control on an applicable home web server.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.kb.cert.org/vuls/id/602801
http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html
http://www.wintercore.com/downloads/rootedcon_0day.pdf
http://www.securityfocus.com/archive/1/511176/100/0/threaded

Exploit#

No public exploit known

History#

Version 12010-05-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.