Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 12/05/2010 Updated: 10/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The site-locking implementation in the SdcWebSecureBase interface in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance relies on a list of server domain names to restrict execution of ActiveX controls, which makes it easier for man-in-the-middle malicious users to execute arbitrary code via a DNS hijacking attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
consona consona live assistance
consona consona dynamic agent -
consona consona subscriber assistance

CWE-310 http://www.kb.cert.org/vuls/id/602801 http://www.wintercore.com/downloads/rootedcon_0day.pdf http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf https://exchange.xforce.ibmcloud.com/vulnerabilities/58608 http://www.securityfocus.com/archive/1/511176/100/0/threaded https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-1911

Vulnerability Summary

References

Vulmon Search

About

Products

Connect