CVEvulnerability

CVE-2012-4655

9.3 HIGH Published 2012-09-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-09-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.

Affected configurations

• cisco secure desktop 3.1 • cisco secure desktop 3.1.1 • cisco secure desktop 3.1.1.27 • cisco secure desktop 3.1.1.33 • cisco secure desktop 3.1.1.45 • cisco secure desktop 3.2 • cisco secure desktop 3.2.1 • cisco secure desktop 3.3 • cisco secure desktop 3.4 • cisco secure desktop 3.4.1 • cisco secure desktop 3.4.2 • cisco secure desktop 3.4.2048 • cisco secure desktop 3.5 • cisco secure desktop 3.5.841 • cisco secure desktop 3.5.1077 • cisco secure desktop 3.5.2001 • cisco secure desktop 3.5.2008 • cisco secure desktop 3.6 • cisco secure desktop 3.6.181 • cisco secure desktop 3.6.185 • cisco secure desktop 3.6.1001 • cisco secure desktop 3.6.2002 • cisco secure desktop 3.6.3002 • cisco secure desktop 3.6.4021 • cisco secure desktop 3.6.5005

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References