CVE:CVE-2010-1911
CNNVD:CNNVD-201005-168
Consona是全球领先的企业应用解决方案和服务供应商，为各种规模的企业提供信息化服务。 
Consona Live Assistance, Dynamic Agent, 和 Subscriber Assistance的tgctlcm.dll中，SdcWebSecureBase接口的site-locking实现依赖服务器域名列表限制ActiveX控制的执行，中间人攻击者可以发起DNS劫持攻击，轻易执行任意代码。
solution:Upgrade consona consona_dynamic_agent to a higher version than -; Upgrade consona consona_live_assistance to a higher version than *; Upgrade consona consona_subscriber_assistance to a higher version than *