CVE-2012-4655

Published: Sep 24, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.

Affected (25)

Products: Cisco: Secure Desktop

Cisco

1 product

Secure Desktop

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Cisco Secure Desktop	Version 3.1.1.27
Cisco Secure Desktop	Version 3.1.1.33
Cisco Secure Desktop	Version 3.1.1.45
Cisco Secure Desktop	Version 3.1.1
Cisco Secure Desktop	Version 3.1
Cisco Secure Desktop	Version 3.2.1
Cisco Secure Desktop	Version 3.2
Cisco Secure Desktop	Version 3.3
Cisco Secure Desktop	Version 3.4.1
Cisco Secure Desktop	Version 3.4.2048
Cisco Secure Desktop	Version 3.4.2
Cisco Secure Desktop	Version 3.4
Cisco Secure Desktop	Version 3.5.1077
Cisco Secure Desktop	Version 3.5.2001
Cisco Secure Desktop	Version 3.5.2008
Cisco Secure Desktop	Version 3.5.841
Cisco Secure Desktop	Version 3.5
Cisco Secure Desktop	Version 3.6.1001
Cisco Secure Desktop	Version 3.6.181
Cisco Secure Desktop	Version 3.6.185
Cisco Secure Desktop	Version 3.6.2002
Cisco Secure Desktop	Version 3.6.3002
Cisco Secure Desktop	Version 3.6.4021
Cisco Secure Desktop	Version 3.6.5005
Cisco Secure Desktop	Version 3.6