AVG Secure Search ActiveX Control Insecure Method Vulnerability

Last Update Date: 9 Jul 2014 Release Date: 8 Jul 2014 3110 Views

RISK: Medium Risk

TYPE: Clients - Browsers

A vulnerability was identified in AVG Secure Search toolbar. It includes an ActiveX control that provides a number of unsafe methods, which may allow a remote, unauthenticated attacker to execute arbitrary code with the privileges of the user.

Note: The product is affected in Internet Explorer only.

Impact

Remote Code Execution

System / Technologies affected

Versions prior to 18.1.7.598

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 18.1.7.598.

Vulnerability Identifier

CVE-2014-2956

Source

CERT/CC