CVE-2010-1517

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-08-02 · updated 2026-06-16
Weakness: CWE-20

Description

The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and (2) download arbitrary programs onto a client system via vectors involving the SetDLInfo method in conjunction with the Bdl method.

Affected products

Gigabyte Dldrv2 Activex Control: 1.4.206.11

References

http://secunia.com/advisories/40161
http://secunia.com/secunia_research/2010-85/
http://secunia.com/advisories/40161
http://secunia.com/secunia_research/2010-85/

Get alerted when CVE-2010-1517 or the next vulnerability affects your stack