CVE-2010-2583: SonicWall SSL-VPN End-Point Interrogator/installer Activex Control

High severity, CVSS 9.3. EPSS: 4.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX control (Aventail.EPInstaller) before 10.5.2 and 10.0.5 hotfix 3 allows remote attackers to execute arbitrary code via long (1) CabURL and (2) Location arguments to the Install3rdPartyComponent method.

Affected products

• SonicWall SSL-VPN End-Point Interrogator/installer Activex Control: up to and including 10.5.1; version 10.0.5 only

Published 2010-11-03. Last modified 2026-06-16.