CVE-2010-2583

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sonicwall:ssl-vpn_end-point_interrogator\/installer_activex_control:*:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:ssl-vpn_end-point_interrogator\/installer_activex_control:10.0.5:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-11-03 13:37

Updated : 2024-02-04 17:54


NVD link : CVE-2010-2583

Mitre link : CVE-2010-2583

CVE.ORG link : CVE-2010-2583


JSON object : View

Products Affected

sonicwall

  • ssl-vpn_end-point_interrogator\/installer_activex_control
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer