Vulnerability Bulletins |
Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the inter-process communication (IPC) channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to execute arbitrary code.The vulnerability is due to a lack of input sanitization of certain IPC commands. An attacker could exploit this vulnerability by sending crafted messages over the IPC channel. A successful exploit could allow the attacker to write to arbitrary user space memory. This could allow an attacker to execute arbitrary code, More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150314-CVE-2015-0664?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20AnyConnect%20Secure%20Mobility%20Client%20Arbitrary%20Code%2 |
|