Unrated severityNVD Advisory· Published May 12, 2010· Updated Apr 29, 2026
CVE-2010-1909
CVE-2010-1909
Description
Buffer overflow in the RunCmd method in the SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to execute arbitrary code via vectors involving "CreateProcess params." NOTE: some of these details are obtained from third party information.
Affected products
5cpe:2.3:a:consona:consona_dynamic_agent:-:-:enterprise:*:*:*:*:*+ 2 more
- cpe:2.3:a:consona:consona_dynamic_agent:-:-:enterprise:*:*:*:*:*
- cpe:2.3:a:consona:consona_dynamic_agent:-:-:marketing:*:*:*:*:*
- cpe:2.3:a:consona:consona_dynamic_agent:-:-:support:*:*:*:*:*
- cpe:2.3:a:consona:consona_live_assistance:*:*:*:*:*:*:*:*
- cpe:2.3:a:consona:consona_subscriber_assistance:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.kb.cert.org/vuls/id/602801nvdPatchUS Government Resource
- www.wintercore.com/downloads/rootedcon_0day.pdfnvdExploit
- secunia.com/advisories/39751nvdVendor Advisory
- wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.htmlnvd
- www.securityfocus.com/archive/1/511176/100/0/threadednvd
News mentions
0No linked articles in our index yet.