CVEvulnerability
CVE-2012-0358
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2012-03-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 through 7.2 before 7.2(5.6), 8.0 before 8.0(5.26), 8.1 before 8.1(2.53), 8.2 before 8.2(5.18), 8.3 before 8.3(2.28), 8.2 before 8.4(2.16), and 8.6 before 8.6(1.1), allows remote attackers to execute arbitrary code via unspecified vectors, aka Bug ID CSCtr00165.
Affected configurations
• cisco adaptive security appliance software 7.0
• cisco adaptive security appliance software 7.0\(0\)
• cisco adaptive security appliance software 7.0\(1\)
• cisco adaptive security appliance software 7.0\(2\)
• cisco adaptive security appliance software 7.0\(4\)
• cisco adaptive security appliance software 7.0\(5\)
• cisco adaptive security appliance software 7.0\(5.2\)
• cisco adaptive security appliance software 7.0\(6\)
• cisco adaptive security appliance software 7.0\(6.7\)
• cisco adaptive security appliance software 7.0\(7\)
• cisco adaptive security appliance software 7.0\(8\)
• cisco adaptive security appliance software 7.0.1
• cisco adaptive security appliance software 7.0.1.4
• cisco adaptive security appliance software 7.0.2
• cisco adaptive security appliance software 7.0.4
• cisco adaptive security appliance software 7.0.4.3
• cisco adaptive security appliance software 7.0.5
• cisco adaptive security appliance software 7.0.6
• cisco adaptive security appliance software 7.0.7
• cisco adaptive security appliance software 7.0.8
• cisco adaptive security appliance software 7.1
• cisco adaptive security appliance software 7.1\(2\)
• cisco adaptive security appliance software 7.1\(2.5\)
• cisco adaptive security appliance software 7.1\(2.27\)
• cisco adaptive security appliance software 7.1\(2.48\)
• cisco adaptive security appliance software 7.1\(2.49\)
• cisco adaptive security appliance software 7.1\(5\)
• cisco adaptive security appliance software 7.1.1
• cisco adaptive security appliance software 7.1.2
• cisco adaptive security appliance software 7.2
• cisco adaptive security appliance software 7.2\(1\)
• cisco adaptive security appliance software 7.2\(1.22\)
• cisco adaptive security appliance software 7.2\(2\)
• cisco adaptive security appliance software 7.2\(2.5\)
• cisco adaptive security appliance software 7.2\(2.7\)
• cisco adaptive security appliance software 7.2\(2.8\)
• cisco adaptive security appliance software 7.2\(2.10\)
• cisco adaptive security appliance software 7.2\(2.14\)
• cisco adaptive security appliance software 7.2\(2.15\)
• cisco adaptive security appliance software 7.2\(2.16\)
• cisco adaptive security appliance software 7.2\(2.17\)
• cisco adaptive security appliance software 7.2\(2.18\)
• cisco adaptive security appliance software 7.2\(2.19\)
• cisco adaptive security appliance software 7.2\(2.48\)
• cisco adaptive security appliance software 7.2\(3\)
• cisco adaptive security appliance software 7.2\(4\)
• cisco adaptive security appliance software 7.2\(5\)
• cisco adaptive security appliance software 7.2.1
• cisco adaptive security appliance software 7.2.2
• cisco adaptive security appliance software 7.2.3
• cisco adaptive security appliance software 7.2.4
• cisco adaptive security appliance software 7.2.5
• cisco adaptive security appliance software 8.0
• cisco adaptive security appliance software 8.0\(2\)
• cisco adaptive security appliance software 8.0\(3\)
• cisco adaptive security appliance software 8.0\(4\)
• cisco adaptive security appliance software 8.0\(5\)
• cisco adaptive security appliance software 8.0.2
• cisco adaptive security appliance software 8.0.3
• cisco adaptive security appliance software 8.0.4
… and 26 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asaclient Vendor Advisory
- http://www.kb.cert.org/vuls/id/339177 US Government Resource
- http://www.securitytracker.com/id?1026799 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74027 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asaclient Vendor Advisory
- http://www.kb.cert.org/vuls/id/339177 US Government Resource
- http://www.securitytracker.com/id?1026799 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74027 exchange.xforce.ibmcloud.com