Remote Code Execution Vulnerability in Cisco Secure Desktop ActiveX Control

CVE-2011-0925

Summary

The CSDWebInstallerCtrl ActiveX control, found in the CSDWebInstaller.ocx file within Cisco Secure Desktop, is vulnerable to exploitation by remote attackers. By manipulating the identification of a Cisco program featuring a legitimate digital signature, attackers can rename this program to inst.exe, resulting in the unintended download and execution of malicious software on a client's system. This vulnerability represents a significant risk, allowing unauthorized access and potential control over affected machines, emphasizing the need for robust security measures and timely patching.

References