CVE-2012-4655

Published Sep 24, 2012

Last updated 7 years ago

Overview

Description: The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.
Source: ykramarz@cisco.com
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-20

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6EE6B79A-FD31-4637-BE22-EEADF63B94FF"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7F2F8EA5-8DEF-48D0-9E7F-6047D4AECC5C"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1.27:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "59D841B0-3D1B-4F1C-87F1-D0355955E49C"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1.33:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F13E414E-E56E-496E-A952-F93DCF1B1BDC"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1.45:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "21F5DFB0-21F4-45F7-B4AF-000B24DEA596"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D7A8878-2E0F-4140-86DF-75999B47E4F5"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4932BA9E-4156-4445-93E9-7A9F1D81090B"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3497EB29-C406-44C1-AB28-0DDC4E79A9D9"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6C63D54D-6424-4767-9832-41E7F0B1D1E9"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F4D4CF6F-2F81-45B0-9B5B-C8D79E74D6F4"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.4.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AA0286A4-6011-41DF-B607-44CFBBFD437F"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.4.2048:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FE277431-4101-4C0F-91DB-A1C15C0344FF"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4142FB07-D5F0-4209-B0DE-67B768D7BDAC"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.841:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "85641AF5-7A5B-4146-9806-E055420DB3AD"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.1077:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7D5FC538-64F7-4F3D-9FAE-82D5015737DE"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.2001:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4F72D901-C62C-41A0-8D68-72CB9508E507"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.2008:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D79AB614-C5B3-4116-B957-A42F6AD0DD6F"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9273F0F3-38F2-45AE-8453-1004A7CE91EC"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.181:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A1A4F9A8-DB02-45A0-ABE4-08683C798CC3"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.185:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "71AF8E5A-42C5-42CB-8890-6F00BC1C471A"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.1001:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4CA7E7CD-E877-4868-B868-AF77F931F593"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.2002:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "93F2063D-7955-4217-A13D-217ED25C5DAE"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.3002:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BA30F821-2963-4431-B25F-BB061CBCBE27"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.4021:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "689D7A99-1CB3-4930-8A0B-466DDC718D6D"
          },
          {
            "criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.5005:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2D9C94C7-3E8A-4E3A-A88F-648F755D3C3A"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Configurations

References