CVE-2012-4655

{"id": "CVE-2012-4655", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2012-09-24T17:55:07.157", "references": [{"url": "http://secunia.com/advisories/50669", "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/55606", "source": "ykramarz@cisco.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78677", "source": "ykramarz@cisco.com"}, {"url": "http://secunia.com/advisories/50669", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/55606", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78677", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204."}, {"lang": "es", "value": "La funcionalidad WebLaunch en Cisco Secure Desktop antes de v3.6.6020 no valida adecuadamente los binarios recibidos por el proceso de descarga, lo que permite a cualquier atacante ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores relacionados con (1) ActiveX o (2) componentes Java. El problema esta identificado con los Bug IDs CSCtz76128 y CSCtz78204."}], "lastModified": "2024-11-21T01:43:17.553", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:secure_desktop:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6EE6B79A-FD31-4637-BE22-EEADF63B94FF"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F2F8EA5-8DEF-48D0-9E7F-6047D4AECC5C"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1.27:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59D841B0-3D1B-4F1C-87F1-D0355955E49C"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1.33:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F13E414E-E56E-496E-A952-F93DCF1B1BDC"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1.45:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21F5DFB0-21F4-45F7-B4AF-000B24DEA596"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D7A8878-2E0F-4140-86DF-75999B47E4F5"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4932BA9E-4156-4445-93E9-7A9F1D81090B"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3497EB29-C406-44C1-AB28-0DDC4E79A9D9"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C63D54D-6424-4767-9832-41E7F0B1D1E9"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4D4CF6F-2F81-45B0-9B5B-C8D79E74D6F4"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA0286A4-6011-41DF-B607-44CFBBFD437F"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.4.2048:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE277431-4101-4C0F-91DB-A1C15C0344FF"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4142FB07-D5F0-4209-B0DE-67B768D7BDAC"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.841:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85641AF5-7A5B-4146-9806-E055420DB3AD"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.1077:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D5FC538-64F7-4F3D-9FAE-82D5015737DE"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.2001:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F72D901-C62C-41A0-8D68-72CB9508E507"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.2008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D79AB614-C5B3-4116-B957-A42F6AD0DD6F"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9273F0F3-38F2-45AE-8453-1004A7CE91EC"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.181:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1A4F9A8-DB02-45A0-ABE4-08683C798CC3"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.185:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71AF8E5A-42C5-42CB-8890-6F00BC1C471A"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.1001:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CA7E7CD-E877-4868-B868-AF77F931F593"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.2002:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93F2063D-7955-4217-A13D-217ED25C5DAE"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.3002:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA30F821-2963-4431-B25F-BB061CBCBE27"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.4021:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "689D7A99-1CB3-4930-8A0B-466DDC718D6D"}, {"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.5005:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D9C94C7-3E8A-4E3A-A88F-648F755D3C3A"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}