CVE-2013-5559 — MEDIUM (6.8)

Vulnerability Description

Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.

CVSS Score

6.8

MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Cisco	Anyconnect Secure Mobility Client	2.0

Related Weaknesses (CWE)

CWE-119

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5559Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5559Vendor Advisory

FAQ

What is CVE-2013-5559?

CVE-2013-5559 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code v...

How severe is CVE-2013-5559?

CVE-2013-5559 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-5559?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Anyconnect Secure Mobility Client.