PT-2013-5639 · Cisco+1 · Cisco Anyconnect Secure Mobility Client+1
Published
2013-11-04
·
Updated
2016-09-21
·
CVE-2013-5559
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Cisco AnyConnect Secure Mobility Client versions 2.x
Description
The issue is related to a buffer overflow in the Active Template Library (ATL) framework within the VPNAPI COM module. This allows remote attackers to execute arbitrary code when a user opens a crafted HTML document.
Recommendations
For Cisco AnyConnect Secure Mobility Client version 2.x, update to a version that contains a fix for this issue to prevent exploitation.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Active Template Library
Cisco Anyconnect Secure Mobility Client