CVEvulnerability
CVE-2014-2956
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-07-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of arbitrary programs via a crafted web site.
Affected configurations
• avg safeguard (<= 18.1.7)
• avg secure search toolbar (<= 18.1.7)
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/960193 US Government Resource
- http://www.kb.cert.org/vuls/id/960193 US Government Resource