| ID |
CVE-2014-2956
|
| Sažetak |
ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of arbitrary programs via a crafted web site. |
| Reference |
|
| CVSS |
| Base: | 9.3 |
| Impact: | 10.0 |
| Exploitability: | 8.6 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| NETWORK |
MEDIUM |
NONE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| CVSS vektor |
AV:N/AC:M/Au:N/C:C/I:C/A:C |
| Zadnje važnije ažuriranje |
08-07-2014 - 18:49 |
| Objavljeno |
08-07-2014 - 11:06 |
