CVE-2010-2193

Multiple unspecified vulnerabilities in the CA (1) PSFormX and (2) WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/40494
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=238635	Vendor Advisory
http://www.securityfocus.com/bid/40689
http://osvdb.org/65382
http://secunia.com/advisories/40092
https://exchange.xforce.ibmcloud.com/vulnerabilities/59293
http://www.securityfocus.com/archive/1/511764/100/0/threaded

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ca:webscan_active_x_control:7b297bfd-85e4-4092-b2af-16a91b2ea103:::::::*
	cpe:2.3:a:ca:psformx_active_x_control:56393399-041a-4650-94c7-13dfcb1f4665:::::::*

Information

Published : 2010-06-10 00:30

Updated : 2018-10-10 19:59

NVD link : CVE-2010-2193

Mitre link : CVE-2010-2193

JSON object : View

Products Affected

ca

psformx_active_x_control
webscan_active_x_control

CWE

NVD-CWE-noinfo CWE-20

Improper Input Validation

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/40494", "name": "40494", "tags": [], "refsource": "BID"}, {"url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=238635", "name": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=238635", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.securityfocus.com/bid/40689", "name": "40689", "tags": [], "refsource": "BID"}, {"url": "http://osvdb.org/65382", "name": "65382", "tags": [], "refsource": "OSVDB"}, {"url": "http://secunia.com/advisories/40092", "name": "40092", "tags": [], "refsource": "SECUNIA"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59293", "name": "ca-psform-activex-code-execution(59293)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/511764/100/0/threaded", "name": "20100609 CA20100608-01: Security Notice for CA PSFormX and WebScan ActiveX Controls", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in the CA (1) PSFormX and (2) WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-2193", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "acInsufInfo": true, "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2010-06-10T00:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:ca:webscan_active_x_control:7b297bfd-85e4-4092-b2af-16a91b2ea103:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:ca:psformx_active_x_control:56393399-041a-4650-94c7-13dfcb1f4665:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-10T19:59Z"}