CVE-2012-0358

2012-03-1500:55:00

CWE-119

[email protected]

web.nvd.nist.gov

cisco

buffer overflow

cve-2012-0358

remote code execution

security vulnerability

activex

cisco asa

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.026 Low

EPSS

Percentile

90.3%

JSON

Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 through 7.2 before 7.2(5.6), 8.0 before 8.0(5.26), 8.1 before 8.1(2.53), 8.2 before 8.2(5.18), 8.3 before 8.3(2.28), 8.2 before 8.4(2.16), and 8.6 before 8.6(1.1), allows remote attackers to execute arbitrary code via unspecified vectors, aka Bug ID CSCtr00165.

CPENameOperatorVersion
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(0\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(1\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(2\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(4\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(5\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(5.2\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(6\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(6.7\)
cisco:adaptive_security_appliance_softwarecisco adaptive security appliance softwareeq7.0\(7\)

CPE	Name	Operator	Version
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(0\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(1\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(2\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(4\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(5\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(5.2\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(6\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(6.7\)
cisco:adaptive_security_appliance_software	cisco adaptive security appliance software	eq	7.0\(7\)