AOH :: HP Unsorted C :: BT-30108.HTM

Consona Products - Multiple vulnerabilities
Consona Products - Multiple vulnerabilities
Consona Products - Multiple vulnerabilities

Affected products:

Consona Live Assistance
Consona Dynamic Agent
Consona Subscriber Assistance


-Remote Code Execution
-Buffer Overflow
-Privilege escalation

Executive summary:

Consona products uses a propietary ActiveX site-lock mechanism that can
be defeated through XSS attacks.

Once an attacker can inject arbitrary JS code within the context of an
allowed domain,  unsafe methods can invoked to download and execute
arbitrary binaries.

A local privilege escalation flaw discovered in the Consona's Repair
Service can be used to bypass IE8 Protected Mode, thus gaining SYSTEM

The XSS flaw leds to a complete system compromise.

Technical Details:

These vulnerabilities were discovered and presented, 2 months ago, by
Ruben Santamarta at RootedCon, a security conference held in Madrid.






Wintercore Iberia S.L.

C/ Castellana 122, 1=BA Derecha


The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2015 AOH
We do not send spam. If you have received spam bearing an email address, please forward it with full headers to