CVE-2010-2583

CVSS 9.3 - HIGH

Description

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.

Affected Products

2

Vendor	Product	Version
sonicwall	ssl-vpn_end-point_interrogator\/installer_activex_control	`All versions`
sonicwall	ssl-vpn_end-point_interrogator\/installer_activex_control	`10.0.5`

References

http://secunia.com/advisories/41644

http://secunia.com/secunia_research/2010-117/

http://software.sonicwall.com/Aventail/KB/hotfix/1...

http://www.securityfocus.com/archive/1/514561/100/...

http://www.securityfocus.com/bid/44535

http://www.securitytracker.com/id?1024666

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

http://secunia.com/advisories/41644

http://secunia.com/secunia_research/2010-117/

http://software.sonicwall.com/Aventail/KB/hotfix/1...

http://www.securityfocus.com/archive/1/514561/100/...

http://www.securityfocus.com/bid/44535

http://www.securitytracker.com/id?1024666

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

Weakness Types

CWE-119

CVE Information

CVE ID:: CVE-2010-2583
Published:: 2010-11-03
Modified:: 2026-04-29
CVSS Score:: 9.3
Severity:: HIGH
Vector:: AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected Vendors

sonicwall

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL