← Database

CVE-2010-2583

CRITICAL CVSS: 9.3 Published: 2010-11-03 Modified: 2026-06-16

Description

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.

Affected Platforms

Sonicwall Ssl-Vpn End-Point Interrogator\/Installer Activex Control

Weakness Type

CWE-119

References