VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 15, 2010· Updated Apr 29, 2026

CVE-2010-0589

CVE-2010-0589

Description

The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and execution of arbitrary files via a crafted web page, aka Bug ID CSCta25876.

Affected products

12
  • Cisco Systems, Inc./Secure Desktop12 versions
    cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*range: <=3.5
    • cpe:2.3:a:cisco:secure_desktop:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_desktop:3.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_desktop:3.1.1.27:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_desktop:3.1.1.33:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_desktop:3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_desktop:3.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_desktop:3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_desktop:3.4:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_desktop:3.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_desktop:3.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:secure_desktop:3.4.2048:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.