CVE-2013-5559

Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
VendorProductVersion
ciscoanyconnect_secure_mobility_client
2.0
ciscoanyconnect_secure_mobility_client
2.1
ciscoanyconnect_secure_mobility_client
2.2
ciscoanyconnect_secure_mobility_client
2.2.128
ciscoanyconnect_secure_mobility_client
2.2.133
ciscoanyconnect_secure_mobility_client
2.2.136
ciscoanyconnect_secure_mobility_client
2.2.140
ciscoanyconnect_secure_mobility_client
2.3
ciscoanyconnect_secure_mobility_client
2.3.185
ciscoanyconnect_secure_mobility_client
2.3.254
ciscoanyconnect_secure_mobility_client
2.3.2016
ciscoanyconnect_secure_mobility_client
2.4
ciscoanyconnect_secure_mobility_client
2.4
ciscoanyconnect_secure_mobility_client
2.4.0202
ciscoanyconnect_secure_mobility_client
2.4.1012
ciscoanyconnect_secure_mobility_client
2.4.5004
ciscoanyconnect_secure_mobility_client
2.5
ciscoanyconnect_secure_mobility_client
2.5.0217
ciscoanyconnect_secure_mobility_client
2.5.1025
ciscoanyconnect_secure_mobility_client
2.5.2001
ciscoanyconnect_secure_mobility_client
2.5.2006
ciscoanyconnect_secure_mobility_client
2.5.2010
ciscoanyconnect_secure_mobility_client
2.5.2011
ciscoanyconnect_secure_mobility_client
2.5.2014
ciscoanyconnect_secure_mobility_client
2.5.2017
ciscoanyconnect_secure_mobility_client
2.5.2018
ciscoanyconnect_secure_mobility_client
2.5.2019
ciscoanyconnect_secure_mobility_client
2.5.3041
ciscoanyconnect_secure_mobility_client
2.5.3046
ciscoanyconnect_secure_mobility_client
2.5.3051
ciscoanyconnect_secure_mobility_client
2.5.3054
ciscoanyconnect_secure_mobility_client
2.5.3055
ciscoanyconnect_secure_mobility_client
2.5.6005
𝑥
= Vulnerable software versions