CVE-2014-2956: Avg Safeguard

High severity, CVSS 9.3. EPSS: 4.2% chance of exploitation in the next 30 days.

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of arbitrary programs via a crafted web site.

Affected products

• Avg Safeguard: up to and including 18.1.7
• Avg Secure Search Toolbar: up to and including 18.1.7

Published 2014-07-08. Last modified 2026-06-17.