Back to search
CVE-2010-1907
Published: May 11, 2010
Modified: Aug 7, 2024
PUBLISHED
Description
The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to discover the username of the client user, and consequently determine a pathname to a certain user directory, via a call to the GetUserName method.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
VU#602801
third-party-advisory
x_refsource_CERT-VN
http://www.wintercore.com/downloads/rootedcon_0day.pdf
x_refsource_MISC
20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now