CVE-2007-5580

Published: Dec 15, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote attackers to execute arbitrary code via a crafted SMB packet in a TCP session on port (1) 139 or (2) 445.

Affected (18)

Products: Cisco: Security Agent

1 product

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Cisco Security Agent	Version 2.1
Cisco Security Agent	Version 3
Cisco Security Agent	Version 4.0.1
Cisco Security Agent	Version 4.0.2
Cisco Security Agent	Version 4.0.3.728
Cisco Security Agent	Version 4.0.3
Cisco Security Agent	Version 4.0
Cisco Security Agent	Version 4.5.1.639
Cisco Security Agent	Version 4.5.1.657
Cisco Security Agent	Version 4.5.1.659
Cisco Security Agent	Version 4.5.1
Cisco Security Agent	Version 4.5
Cisco Security Agent	Version 5.0.0.201
Cisco Security Agent	Version 5.0.193
Cisco Security Agent	Version 5.0
Cisco Security Agent	Version 5.1.79
Cisco Security Agent	Version 5.1
Cisco Security Agent	Version 5.2

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (20)

http://osvdb.org/39521

Source: psirt@cisco.com

http://secunia.com/advisories/27947

Source: psirt@cisco.com

Vendor Advisory

http://securityreason.com/securityalert/3425

Source: psirt@cisco.com

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsl00618

Source: psirt@cisco.com

http://www.cisco.com/en/US/products/products_security_advisory09186a008090a434.shtml

Source: psirt@cisco.com

http://www.nsfocus.com/english/homepage/research/0702.htm

Source: psirt@cisco.com

http://www.securityfocus.com/archive/1/484669/100/100/threaded

Source: psirt@cisco.com

http://www.securityfocus.com/bid/26723

Source: psirt@cisco.com

http://www.securitytracker.com/id?1019046

Source: psirt@cisco.com

http://www.vupen.com/english/advisories/2007/4103

Source: psirt@cisco.com

http://osvdb.org/39521

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27947

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/3425

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsl00618

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cisco.com/en/US/products/products_security_advisory09186a008090a434.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.nsfocus.com/english/homepage/research/0702.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/484669/100/100/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26723

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019046

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/4103

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.