Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2012-4655

The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.

  • Published: Sep 24, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-4655
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
cisco / secure_desktop 3.1.1.33 3.1.1.33.x
cisco / secure_desktop 3.6.3002 3.6.3002.x
cisco / secure_desktop 3.6.185 3.6.185.x
cisco / secure_desktop 3.5 3.5.x
cisco / secure_desktop 3.3 3.3.x
cisco / secure_desktop 3.6.2002 3.6.2002.x
cisco / secure_desktop 3.1.1.45 3.1.1.45.x
cisco / secure_desktop 3.4.2048 3.4.2048.x
cisco / secure_desktop 3.6.181 3.6.181.x
cisco / secure_desktop 3.6.1001 3.6.1001.x
cisco / secure_desktop 3.1.1 3.1.1.x
cisco / secure_desktop 3.5.841 3.5.841.x
cisco / secure_desktop 3.5.2008 3.5.2008.x
cisco / secure_desktop 3.2 3.2.x
cisco / secure_desktop 3.5.2001 3.5.2001.x
cisco / secure_desktop 3.2.1 3.2.1.x
cisco / secure_desktop 3.4 3.4.x
cisco / secure_desktop 3.1.1.27 3.1.1.27.x
cisco / secure_desktop 3.5.1077 3.5.1077.x
cisco / secure_desktop 3.4.2 3.4.2.x
cisco / secure_desktop 3.6.5005 3.6.5005.x
cisco / secure_desktop 3.6.4021 3.6.4021.x
cisco / secure_desktop 3.6 3.6.x
cisco / secure_desktop 3.4.1 3.4.1.x
cisco / secure_desktop 3.1 3.1.x