CVE-2010-1908 Information

Description

The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance Dynamic Agent and Subscriber Assistance does not properly restrict access to the HTTPDownloadFile HTTPGetFile Install and RunCmd methods which allows remote attackers to execute arbitrary programs via a URL in the url argument to (1) HTTPDownloadFile or (2) HTTPGetFile.

Reference

http://secunia.com/advisories/39751 http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html http://www.kb.cert.org/vuls/id/602801 http://www.securityfocus.com/archive/1/511176/100/0/threaded http://www.wintercore.com/downloads/rootedcon_0day.pdf The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance Dynamic Agent and Subscriber Assistance does not properly restrict access to the HTTPDownloadFile HTTPGetFile Install and RunCmd methods which allows remote attackers to execute arbitrary programs via a URL in the url argument to (1) HTTPDownloadFile or (2) HTTPGetFile.