CVE-2013-5559

Published: Nov 4, 2013Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.

Affected (43)

Products: Cisco: Anyconnect Secure Mobility Client

Cisco

1 product

Anyconnect Secure Mobility Client

Configuration A

43 vulnerable

Vulnerable Software	Affected Versions
Cisco Anyconnect Secure Mobility Client	Version 2.0
Cisco Anyconnect Secure Mobility Client	Version 2.1
Cisco Anyconnect Secure Mobility Client	Version 2.2.128
Cisco Anyconnect Secure Mobility Client	Version 2.2.133
Cisco Anyconnect Secure Mobility Client	Version 2.2.136
Cisco Anyconnect Secure Mobility Client	Version 2.2.140
Cisco Anyconnect Secure Mobility Client	Version 2.2
Cisco Anyconnect Secure Mobility Client	Version 2.3.185
Cisco Anyconnect Secure Mobility Client	Version 2.3.2016
Cisco Anyconnect Secure Mobility Client	Version 2.3.254
Cisco Anyconnect Secure Mobility Client	Version 2.3
Cisco Anyconnect Secure Mobility Client	Version 2.4.0202
Cisco Anyconnect Secure Mobility Client	Version 2.4.1012
Cisco Anyconnect Secure Mobility Client	Version 2.4.4004
Cisco Anyconnect Secure Mobility Client	Version 2.4.4014
Cisco Anyconnect Secure Mobility Client	Version 2.4.5004
Cisco Anyconnect Secure Mobility Client	Version 2.4.7030
Cisco Anyconnect Secure Mobility Client	Version 2.4.7073
Cisco Anyconnect Secure Mobility Client	Version 2.4
Cisco Anyconnect Secure Mobility Client	Version 2.4
Cisco Anyconnect Secure Mobility Client	Version 2.5.0217
Cisco Anyconnect Secure Mobility Client	Version 2.5.1025
Cisco Anyconnect Secure Mobility Client	Version 2.5.2001
Cisco Anyconnect Secure Mobility Client	Version 2.5.2006
Cisco Anyconnect Secure Mobility Client	Version 2.5.2010
Cisco Anyconnect Secure Mobility Client	Version 2.5.2011
Cisco Anyconnect Secure Mobility Client	Version 2.5.2014
Cisco Anyconnect Secure Mobility Client	Version 2.5.2017
Cisco Anyconnect Secure Mobility Client	Version 2.5.2018
Cisco Anyconnect Secure Mobility Client	Version 2.5.2019
Cisco Anyconnect Secure Mobility Client	Version 2.5.3041
Cisco Anyconnect Secure Mobility Client	Version 2.5.3046
Cisco Anyconnect Secure Mobility Client	Version 2.5.3051
Cisco Anyconnect Secure Mobility Client	Version 2.5.3054
Cisco Anyconnect Secure Mobility Client	Version 2.5.3055
Cisco Anyconnect Secure Mobility Client	Version 2.5.5112
Cisco Anyconnect Secure Mobility Client	Version 2.5.5116
Cisco Anyconnect Secure Mobility Client	Version 2.5.5118
Cisco Anyconnect Secure Mobility Client	Version 2.5.5125
Cisco Anyconnect Secure Mobility Client	Version 2.5.5130
Cisco Anyconnect Secure Mobility Client	Version 2.5.5131
Cisco Anyconnect Secure Mobility Client	Version 2.5.6005
Cisco Anyconnect Secure Mobility Client	Version 2.5

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5559

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5559

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.