Unscored severity · published Aug 2, 2010
CVE-2010-1517
The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary programs onto a client system, and execute these programs, via vectors involving…
–
CVSS
1.8%
EPSS
No
On KEV
Description
The GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to (1) download arbitrary programs onto a client system, and execute these programs, via vectors involving the dl method; and (2) download arbitrary programs onto a client system via vectors involving the SetDLInfo method in conjunction with the Bdl method.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
Dldrv2 Activex Control · Gigabyte
1.4.206.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1517
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1517
Vendor Advisory
http://secunia.com/advisories/40161
Vendor Advisory
http://secunia.com/secunia_research/2010-85/
More from Dldrv2 Activex Control
–
CVE-2010-1518
Array index error in the SetDLInfo method in the GIGABYTE Dldrv2 ActiveX control 1.4.206.11 allows remote attackers to execute arbitrary code or cause a denial of service (memory…