Buffer overflow

2013-11-0416:55:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

0.833 High

EPSS

Percentile

98.5%

JSON

Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.

CPENameOperatorVersion
anyconnect_secure_mobility_clienteq2.5.3046
anyconnect_secure_mobility_clienteq2.5.3041
anyconnect_secure_mobility_clienteq2.4.4004
anyconnect_secure_mobility_clienteq2.5.2017
anyconnect_secure_mobility_clienteq2.4
anyconnect_secure_mobility_clienteq2.5.2001
anyconnect_secure_mobility_clienteq2.4.4014
anyconnect_secure_mobility_clienteq2.2.128
anyconnect_secure_mobility_clienteq2.3
anyconnect_secure_mobility_clienteq2.5.5125

Name	Operator	Version
anyconnect_secure_mobility_client	eq	2.5.3046
anyconnect_secure_mobility_client	eq	2.5.3041
anyconnect_secure_mobility_client	eq	2.4.4004
anyconnect_secure_mobility_client	eq	2.5.2017
anyconnect_secure_mobility_client	eq	2.4
anyconnect_secure_mobility_client	eq	2.5.2001
anyconnect_secure_mobility_client	eq	2.4.4014
anyconnect_secure_mobility_client	eq	2.2.128
anyconnect_secure_mobility_client	eq	2.3
anyconnect_secure_mobility_client	eq	2.5.5125