CVE-2015-6305

CVE-2015-6305 affects Cisco AnyConnect Secure Mobility Client for Windows (versions 2.0–4.1). The issue arises from untrusted search path handling in vpndownloader.exe’s CMainThread::launchDownloader, enabling a local attacker with valid credentials to plant a malicious DLL in the current working...

PT-2015-7168

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions 2.0 through 4.1 Description The issue is related to an untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe. This allows local users to gain...