| Package | Affected versions | Patched versions |
|---|---|---|
| anyconnect secure mobility client | = 2.0= 2.1= 2.2= 2.2.128= 2.2.133= 2.2.136= 2.2.140= 2.3= 2.3.185= 2.3.2016= 2.3.254= 2.4= 2.4.0202= 2.4.1012= 2.4.4004= 2.4.4014= 2.4.5004= 2.4.7030= 2.4.7073= 2.5= 2.5.0217= 2.5.1025= 2.5.2001= 2.5.2006= 2.5.2010= 2.5.2011= 2.5.2014= 2.5.2017= 2.5.2018= 2.5.2019= 2.5.3041= 2.5.3046= 2.5.3051= 2.5.3054= 2.5.3055= 2.5.5112= 2.5.5116= 2.5.5118= 2.5.5125= 2.5.5130= 2.5.5131= 2.5.6005 |
Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free