Cisco Secure Desktop CSDWebInstaller ActiveX Exploit

This module exploits a vulnerability in the CSDWebInstaller.ocx control included in the Cisco Secure Desktop application. The vulnerability is triggered when the control downloads a file from a user controlled URL and executes it without a proper validation of its signature. This module runs a web server waiting for vulnerable clients (Internet Explorer) to connect to it. When the client connects, it will try to install an agent by exploiting this vulnerability.