CVEvulnerability

CVE-2007-5580

10.0 HIGH Published 2007-12-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-12-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2) 445.

Affected configurations

• cisco security agent 2.1 • cisco security agent 3 • cisco security agent 4.0 • cisco security agent 4.0.1 • cisco security agent 4.0.2 • cisco security agent 4.0.3 • cisco security agent 4.0.3.728 • cisco security agent 4.5 • cisco security agent 4.5.1 • cisco security agent 4.5.1.639 • cisco security agent 4.5.1.657 • cisco security agent 4.5.1.659 • cisco security agent 5.0 • cisco security agent 5.0.0.201 • cisco security agent 5.0.193 • cisco security agent 5.1 • cisco security agent 5.1.79 • cisco security agent 5.2

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References