Cisco VPN Client 5.x < 5.0.07.0440 Untrusted Search Path DLL Privilege Escalation

The version of the Cisco VPN client installed on the remote host is 5.x prior to 5.0.07.0440. It is, therefore, affected by a flaw related to loading dynamic link library DLL files due to searching fixed paths that may not be trusted or under user control. A local attacker can exploit this, via a...

CVE-2012-3052

The vulnerability CVE-2012-3052 affects Cisco VPN Client 5.x prior to 5.0.07.0440 and stems from untrusted DLL search path handling. An attacker with local access could place a Trojan DLL in the current working directory, which could be loaded and lead to privilege escalation. Publicly documented...