CVE-2012-4655 The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code v...
HighCVSS 9.3
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco secure desktop | = 3.1 | No fix listed |
| cisco secure desktop | = 3.1.1 | No fix listed |
| cisco secure desktop | = 3.1.1.27 | No fix listed |
| cisco secure desktop | = 3.1.1.33 | No fix listed |
| cisco secure desktop | = 3.1.1.45 | No fix listed |
| cisco secure desktop | = 3.2 | No fix listed |
| cisco secure desktop | = 3.2.1 | No fix listed |
| cisco secure desktop | = 3.3 | No fix listed |
| cisco secure desktop | = 3.4 | No fix listed |
| cisco secure desktop | = 3.4.1 | No fix listed |
| cisco secure desktop | = 3.4.2 | No fix listed |
| cisco secure desktop | = 3.4.2048 | No fix listed |
| cisco secure desktop | = 3.5 | No fix listed |
| cisco secure desktop | = 3.5.841 | No fix listed |
| cisco secure desktop | = 3.5.1077 | No fix listed |
| cisco secure desktop | = 3.5.2001 | No fix listed |
| cisco secure desktop | = 3.5.2008 | No fix listed |
| cisco secure desktop | = 3.6 | No fix listed |
| cisco secure desktop | = 3.6.181 | No fix listed |
| cisco secure desktop | = 3.6.185 | No fix listed |
| cisco secure desktop | = 3.6.1001 | No fix listed |
| cisco secure desktop | = 3.6.2002 | No fix listed |
| cisco secure desktop | = 3.6.3002 | No fix listed |
| cisco secure desktop | = 3.6.4021 | No fix listed |
| cisco secure desktop | = 3.6.5005 | No fix listed |
References
- 50669 third-party-advisory
- 20120620 Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client vendor-advisory
- 55606 vdb-entry
- securedesktop-weblaunch-code-execution(78677) vdb-entry