The VPN downloader implementation in the WebLaunch feature in Cisco An圜onnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug ID CSCtw47523.Ĭisco - adaptive_security_appliance_softwareĬisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with software 8.4 before 8.4(4.1), 8.5 before 8.5(1.11), and 8.6 before 8.6(1.3) allow remote attackers to cause a denial of service (device reload) via IPv6 transit traffic that triggers syslog message 110003, aka Bug ID CSCua27134.Ĭisco - application_control_engine_softwareĬisco Application Control Engine (ACE) before A4(2.3) and A5 before A5(1.1), when multicontext mode is enabled, does not properly share a management IP address among multiple contexts, which allows remote authenticated administrators to bypass intended access restrictions in opportunistic circumstances, and read or modify configuration settings, via a login attempt to a context, aka Bug ID CSCts30631, a different vulnerability than CVE-2012-3058.Ĭms-center - simple_web_content_management_system Use-after-free vulnerability in icclib before 2.13, as used by Argyll CMS before 1.4 and possibly other programs, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted ICC profile file.Ĭisco - anyconnect_secure_mobility_client NOTE: some sources report this issue as an integer overflow.

WPD document that causes a negative array index to be used. The WPXContentListener::_closeTableRow function in WPXContentListener.cpp in libwpd 0.8.8, as used by (OOo) before 3.4, allows remote attackers to execute arbitrary code via a crafted Wordperfect. DOC file, which triggers a heap-based buffer overflow. Integer overflow in the vclmi.dll module in (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a.

Trgui vpn