PT-2013-1797 · Cisco · Cisco Vpn Client

Published 2013-01-17 · Updated 2013-01-18 · CVE-2012-5429

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco VPN Client version (affected versions not specified)

Description The issue arises from the improper interaction between the VPN driver and the kernel in Cisco VPN Client on Windows. This allows local users to cause a denial of service, resulting in a kernel fault and system crash, by utilizing a crafted application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2012-5429

Affected Products

Cisco Vpn Client

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-5429 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-5429 · Vendor Advisory