CVEvulnerability

CVE-2010-0589

9.3 HIGH Published 2010-04-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-04-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876.

Affected configurations

• cisco secure desktop (<= 3.5) • cisco secure desktop 3.1 • cisco secure desktop 3.1.1 • cisco secure desktop 3.1.1.27 • cisco secure desktop 3.1.1.33 • cisco secure desktop 3.2 • cisco secure desktop 3.2.1 • cisco secure desktop 3.3 • cisco secure desktop 3.4 • cisco secure desktop 3.4.1 • cisco secure desktop 3.4.2 • cisco secure desktop 3.4.2048

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References