Design/Logic Flaw

2012-09-2417:55:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

Low

0.025 Low

EPSS

Percentile

90.1%

JSON

The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.

CPENameOperatorVersion
secure_desktopeq3.1.1.33
secure_desktopeq3.6.3002
secure_desktopeq3.6.185
secure_desktopeq3.5
secure_desktopeq3.3
secure_desktopeq3.6.2002
secure_desktopeq3.1.1.45
secure_desktopeq3.4.2048
secure_desktopeq3.6.181
secure_desktopeq3.6.1001

Name	Operator	Version
secure_desktop	eq	3.1.1.33
secure_desktop	eq	3.6.3002
secure_desktop	eq	3.6.185
secure_desktop	eq	3.5
secure_desktop	eq	3.3
secure_desktop	eq	3.6.2002
secure_desktop	eq	3.1.1.45
secure_desktop	eq	3.4.2048
secure_desktop	eq	3.6.181
secure_desktop	eq	3.6.1001