Vulnerability Description
The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Anyconnect Secure Mobility Client | <= 4.0\(.00051\) |
Related Weaknesses (CWE)
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37861Vendor Advisory
- http://www.securitytracker.com/id/1031932
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37861Vendor Advisory
- http://www.securitytracker.com/id/1031932
FAQ
What is CVE-2015-0664?
CVE-2015-0664 is a vulnerability with a CVSS score of 4.3 (MEDIUM). The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted me...
How severe is CVE-2015-0664?
CVE-2015-0664 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-0664?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Anyconnect Secure Mobility Client.