NVD

Id
45997  
Name
CVE-2012-4655  
Description
The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-09-24  
Modified Date
2013-04-04  
Seq
2012-4655  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
231010 45997 CVE-2012-4655 20120620 Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client  View
231011 45997 CVE-2012-4655 55606  View
231012 45997 CVE-2012-4655 securedesktop-weblaunch-code-execution(78677)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28848 JVNDB-2012-004555 Cisco Secure Desktop の WebLaunch 機能における任意のコードを実行される脆弱性 Cisco Secure Desktop の WebLaunch 機能は、ダウンローダプロセスにより受信するバイナリを適切に検証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2012-4655 57893 CVE-2012-4655 45997 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004555.html 2012-06-20 2012-12-20 View