CVE-2016-9192

CVE-2016-9192 affects Cisco AnyConnect Secure Mobility Client for Windows. Root cause: incorrect permissions on a system directory during installation allow a local, authenticated attacker to escalate to SYSTEM by issuing a crafted IPC to the VPN agent. Impact: arbitrary executable execution with...