Consona products uses a proprietary ActiveX site-lock mechanism that can be defeated through XSS attacks. Once an attacker can inject arbitrary JS code within the context of an allowed domain, unsafe methods can invoked to download and execute arbitrary binaries. A local privilege escalation flaw discovered in the Consona’s Repair Service can be used to bypass IE8 Protected Mode, thus gaining SYSTEM privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/89298/consona-exec.txt
Source: https://packetstormsecurity.com/files/89298/Consona-Cross-Site-Scripting-Code-Execution-Buffer-Overflow.html