CVEvulnerability
CVE-2015-0664
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:L/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195.
Affected configurations
• cisco anyconnect secure mobility client (<= 4.0\(.00051\))
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37861 Vendor Advisory
- http://www.securitytracker.com/id/1031932 www.securitytracker.com
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37861 Vendor Advisory
- http://www.securitytracker.com/id/1031932 www.securitytracker.com