PT-2014-4981 · Avg · Avg Secure Search Toolbar+2

Will Dormann · Publicado 2014-07-08 · Atualizado 2014-07-08 · CVE-2014-2956

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AVG Secure Search toolbar versions prior to 18.1.7.598 AVG Safeguard versions prior to 18.1.7.644

Description The issue concerns the ScriptHelperApi in the AVG ScriptHelper ActiveX control, which does not implement domain-based access control for method calls. This allows remote attackers to trigger the downloading and execution of arbitrary programs via a crafted web site.

Recommendations For AVG Secure Search toolbar versions prior to 18.1.7.598, update to version 18.1.7.598 or later. For AVG Safeguard versions prior to 18.1.7.644, update to version 18.1.7.644 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-2956

Produtos afetados

Avg Safeguard

Avg Scripthelper Activex Control

Avg Secure Search Toolbar

Referências · 2

• http://kb.cert.org/vuls/id/960193 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2956 · Nota de Segurança