NVD

Id
44262  
Name
CVE-2012-2493  
Description
The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug ID CSCtw47523.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-06-20  
Modified Date
2012-06-21  
Seq
2012-2493  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222219 44262 CVE-2012-2493 20120620 Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27103 JVNDB-2012-002810 Cisco AnyConnect Secure Mobility Client における任意のコードを実行される脆弱性 Windows、Mac OS X、および Linux 上の Cisco AnyConnect Secure Mobility Client 内の WebLaunch 機能の VPN ダウンローダは、ダウンローダのプロセスにより受信されたバイナリを適切に検証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-2493 55731 CVE-2012-2493 44262 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002810.html 2012-06-20 2012-12-14 View