Security Advisory

CVE-2012-2493

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-06-20 20:00:00

Last updated 2024-09-16 23:15:33

Assigner cisco

State PUBLISHED

Description

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug ID CSCtw47523.

← Browse all CVEs View on cve.org ↗