CVE-2011-0926

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-02-25 · updated 2026-06-16
Weakness: CWE-20

Description

A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by spoofing the CSD installation process, a different vulnerability than CVE-2010-0589.

Affected products

Cisco Secure Desktop: all versions

References

http://securityreason.com/securityalert/8105
http://www.securityfocus.com/archive/1/516647/100/0/threaded
http://www.securityfocus.com/bid/46536
http://www.securitytracker.com/id?1025118
http://www.vupen.com/english/advisories/2011/0513
http://www.zerodayinitiative.com/advisories/ZDI-11-091/
https://exchange.xforce.ibmcloud.com/vulnerabilities/65755
http://securityreason.com/securityalert/8105
http://www.securityfocus.com/archive/1/516647/100/0/threaded
http://www.securityfocus.com/bid/46536
http://www.securitytracker.com/id?1025118
http://www.vupen.com/english/advisories/2011/0513

Get alerted when CVE-2011-0926 or the next vulnerability affects your stack