CVE-2011-2040

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.

• cisco anyconnect secure mobility client (<= 2.5.2019) • cisco anyconnect secure mobility client 2.0 • cisco anyconnect secure mobility client 2.1 • cisco anyconnect secure mobility client 2.2 • cisco anyconnect secure mobility client 2.2.128 • cisco anyconnect secure mobility client 2.2.133 • cisco anyconnect secure mobility client 2.2.136 • cisco anyconnect secure mobility client 2.2.140 • cisco anyconnect secure mobility client 2.3 • cisco anyconnect secure mobility client 2.3.185 • cisco anyconnect secure mobility client 2.3.254 • cisco anyconnect secure mobility client 2.3.2016 • cisco anyconnect secure mobility client 2.4 • cisco anyconnect secure mobility client 2.4.0202 • cisco anyconnect secure mobility client 2.4.1012 • cisco anyconnect secure mobility client 2.5 • cisco anyconnect secure mobility client 2.5.1025 • cisco anyconnect secure mobility client 2.5.2001 • cisco anyconnect secure mobility client 2.5.2006 • cisco anyconnect secure mobility client 2.5.2010 • cisco anyconnect secure mobility client 2.5.2011 • cisco anyconnect secure mobility client 2.5.2014 • cisco anyconnect secure mobility client 2.5.2017 • cisco anyconnect secure mobility client 2.5.2018 • cisco anyconnect secure mobility client 3.0