ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar prior to 18.1.7.598 and AVG Safeguard prior to 18.1.7.644 does not implement domain-based access control for method calls, which allows remote malicious users to trigger the downloading and execution of arbitrary programs via a crafted web site.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
avg secure search toolbar |
||
avg safeguard |
Vulmon