PT-2014-4981
CVE-2014-2956
·
تاريخ النشر
2014-07-08
·
تاريخ التحديث
2014-07-08
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
AVG Secure Search toolbar versions prior to 18.1.7.598
AVG Safeguard versions prior to 18.1.7.644
Description
The issue concerns the ScriptHelperApi in the AVG ScriptHelper ActiveX control, which does not implement domain-based access control for method calls. This allows remote attackers to trigger the downloading and execution of arbitrary programs via a crafted web site.
Recommendations
For AVG Secure Search toolbar versions prior to 18.1.7.598, update to version 18.1.7.598 or later.
For AVG Safeguard versions prior to 18.1.7.644, update to version 18.1.7.644 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾