CVEvulnerability

CVE-2010-1517

10.0 HIGH Published 2010-08-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-08-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and (2) download arbitrary programs onto a client system via vectors involving the SetDLInfo method in conjunction with the Bdl method.

Affected configurations

• gigabyte dldrv2 activex control 1.4.206.11

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References