Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-0358

Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 through 7.2 before 7.2(5.6), 8.0 before 8.0(5.26), 8.1 before 8.1(2.53), 8.2 before 8.2(5.18), 8.3 before 8.3(2.28), 8.2 before 8.4(2.16), and 8.6 before 8.6(1.1), allows remote attackers to execute arbitrary code via unspecified vectors, aka Bug ID CSCtr00165.

Published

2012-03-15T00:55:01.100

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	cisco	adaptive_security_appliance_software	7.0	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(0\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(1\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(2\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(4\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(5\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(5.2\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(6\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(6.7\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(7\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0\(8\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.1	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.1.4	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.2	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.4	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.4.3	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.5	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.6	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.7	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.8	Yes
Operating System	cisco	adaptive_security_appliance_software	7.0.8	Yes
Operating System	cisco	adaptive_security_appliance_software	7.1	Yes
Operating System	cisco	adaptive_security_appliance_software	7.1\(2\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.1\(2.5\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.1\(2.27\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.1\(2.48\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.1\(2.49\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.1\(5\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.1.1	Yes
Operating System	cisco	adaptive_security_appliance_software	7.1.2	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(1\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(1.22\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.5\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.7\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.8\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.10\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.14\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.15\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.16\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.17\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.18\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.19\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(2.48\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(3\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(4\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2\(5\)	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2.1	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2.2	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2.3	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2.4	Yes
Operating System	cisco	adaptive_security_appliance_software	7.2.5	Yes
Operating System	cisco	adaptive_security_appliance_software	8.0	Yes
Operating System	cisco	adaptive_security_appliance_software	8.0\(2\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.0\(3\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.0\(4\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.0\(5\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.0.2	Yes
Operating System	cisco	adaptive_security_appliance_software	8.0.3	Yes
Operating System	cisco	adaptive_security_appliance_software	8.0.4	Yes
Operating System	cisco	adaptive_security_appliance_software	8.0.5	Yes
Operating System	cisco	adaptive_security_appliance_software	8.1	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2\(1\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2\(2\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2\(3\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2\(3.9\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2\(4\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2\(4.1\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2\(4.4\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2\(5\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2.1	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2.2	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2.2	Yes
Operating System	cisco	adaptive_security_appliance_software	8.2.3	Yes
Operating System	cisco	adaptive_security_appliance_software	8.3\(1\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.3\(2\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.3.1	Yes
Operating System	cisco	adaptive_security_appliance_software	8.3.1	Yes
Operating System	cisco	adaptive_security_appliance_software	8.3.2	Yes
Operating System	cisco	adaptive_security_appliance_software	8.4	Yes
Operating System	cisco	adaptive_security_appliance_software	8.4\(1\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.4\(1.11\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.4\(2\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.4\(2.11\)	Yes
Operating System	cisco	adaptive_security_appliance_software	8.5	Yes
Operating System	cisco	adaptive_security_appliance_software	8.6	Yes
Operating System	cisco	adaptive_security_appliance_software	8.6\(1\)	Yes
Hardware	cisco	5500_series_adaptive_security_appliance	*	Yes

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asaclient Vendor Advisory ([email protected])
http://www.kb.cert.org/vuls/id/339177 US Government Resource ([email protected])
http://www.securitytracker.com/id?1026799 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/74027 ([email protected])
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120314-asaclient Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/339177 US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1026799 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/74027 (af854a3a-2127-422b-91ae-364da2661108)