Arbitrary Code Execution in GIGABYTE Dldrv2 ActiveX Control
CVE-2010-1517

Currently unrated

Key Information:

Vendor

Gigabyte

Status
Dldrv2 Activex Control
Vendor
CVE Published:
2 August 2010

What is CVE-2010-1517?

The GIGABYTE Dldrv2 ActiveX control version 1.4.206.11 is susceptible to vulnerabilities that allow remote attackers to download and execute arbitrary programs on the client's system. This can occur through interactions involving the dl method or by using the SetDLInfo method alongside the Bdl method, posing serious security implications.

References

http://secunia.com/advisories/40161
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/secunia_research/2010-85/
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.