CVE-2011-2040

Publicada em 02 jun 2011 · Atualizada em 06 ago 2024

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 11%

probabilidade de exploração

11%top 4% das CVEs

exploração observada

nãonenhuma fonte reporta

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.

Produtos afetados

n/a · n/a

Referências

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=910 https://exchange.xforce.ibmcloud.com/vulnerabilities/67739 http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml http://www.kb.cert.org/vuls/id/490097 http://www.securitytracker.com/id?1025591