VULNERABILITY INTELLIGENCE

CVE-2014-2956

CVSS score9.3 HIGH
EPSS probability4.17%
CISA KEVNot currently listed
Published2014-07-08
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of arbitrary programs via a crafted web site.

Primary references