CVE-2014-2956

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of arbitrary programs via a crafted web site.
References
Link Resource
http://www.kb.cert.org/vuls/id/960193 US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:avg:safeguard:*:*:*:*:*:*:*:*
cpe:2.3:a:avg:secure_search_toolbar:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-07-08 11:06

Updated : 2024-02-04 18:35


NVD link : CVE-2014-2956

Mitre link : CVE-2014-2956

CVE.ORG link : CVE-2014-2956


JSON object : View

Products Affected

avg

  • secure_search_toolbar
  • safeguard
CWE
CWE-264

Permissions, Privileges, and Access Controls