CVE-2012-2493

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows...

CVE-2012-2493

Cisco AnyConnect Secure Mobility Client is affected by CVE-2012-2493 due to a vulnerable WebLaunch VPN downloader that does not properly validate downloaded binaries. This allows remote code execution via ActiveX or Java components. Affected products include Windows 2.x builds before 2.5 MR6, and...

CVE-2012-2493

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows...