CVE-2012-0358: Buffer Overflow
Published Mar 15, 2012
·Updated
Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 through 7.2 before 7.2(5.6), 8.0 before 8.0(5.26), 8.1 before 8.1(2.53), 8.2 before 8.2(5.18), 8.3 before 8.3(2.28), 8.2 before 8.4(2.16), and 8.6 before 8.6(1.1), allows remote attackers to execute arbitrary code via unspecified vectors, aka Bug ID CSCtr00165.
Affected Software
89 affected components
Cisco Adaptive Security Appliance Software=7.0
Cisco Adaptive Security Appliance Software=7.0\(0\)
Cisco Adaptive Security Appliance Software=7.0\(1\)
Cisco Adaptive Security Appliance Software=7.0\(2\)
Cisco Adaptive Security Appliance Software=7.0\(4\)
Cisco Adaptive Security Appliance Software=7.0\(5\)
Cisco Adaptive Security Appliance Software=7.0\(5.2\)
Cisco Adaptive Security Appliance Software=7.0\(6\)
Cisco Adaptive Security Appliance Software=7.0\(6.7\)
Cisco Adaptive Security Appliance Software=7.0\(7\)
Cisco Adaptive Security Appliance Software=7.0\(8\)
Cisco Adaptive Security Appliance Software=7.0.1
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.2
Cisco Adaptive Security Appliance Software=7.0.4
Cisco Adaptive Security Appliance Software=7.0.4.3
Cisco Adaptive Security Appliance Software=7.0.5
Cisco Adaptive Security Appliance Software=7.0.6
Cisco Adaptive Security Appliance Software=7.0.7
Cisco Adaptive Security Appliance Software=7.0.8
Cisco Adaptive Security Appliance Software=7.0.8-interim
Cisco Adaptive Security Appliance Software=7.1
Cisco Adaptive Security Appliance Software=7.1\(2\)
Cisco Adaptive Security Appliance Software=7.1\(2.5\)
Cisco Adaptive Security Appliance Software=7.1\(2.27\)
Cisco Adaptive Security Appliance Software=7.1\(2.48\)
Cisco Adaptive Security Appliance Software=7.1\(2.49\)
Cisco Adaptive Security Appliance Software=7.1\(5\)
Cisco Adaptive Security Appliance Software=7.1.1
Cisco Adaptive Security Appliance Software=7.1.2
Cisco Adaptive Security Appliance Software=7.2
Cisco Adaptive Security Appliance Software=7.2\(1\)
Cisco Adaptive Security Appliance Software=7.2\(1.22\)
Cisco Adaptive Security Appliance Software=7.2\(2\)
Cisco Adaptive Security Appliance Software=7.2\(2.5\)
Cisco Adaptive Security Appliance Software=7.2\(2.7\)
Cisco Adaptive Security Appliance Software=7.2\(2.8\)
Cisco Adaptive Security Appliance Software=7.2\(2.10\)
Cisco Adaptive Security Appliance Software=7.2\(2.14\)
Cisco Adaptive Security Appliance Software=7.2\(2.15\)
Cisco Adaptive Security Appliance Software=7.2\(2.16\)
Cisco Adaptive Security Appliance Software=7.2\(2.17\)
Cisco Adaptive Security Appliance Software=7.2\(2.18\)
Cisco Adaptive Security Appliance Software=7.2\(2.19\)
Cisco Adaptive Security Appliance Software=7.2\(2.48\)
Cisco Adaptive Security Appliance Software=7.2\(3\)
Cisco Adaptive Security Appliance Software=7.2\(4\)
Cisco Adaptive Security Appliance Software=7.2\(5\)
Cisco Adaptive Security Appliance Software=7.2.1
Cisco Adaptive Security Appliance Software=7.2.2
Cisco Adaptive Security Appliance Software=7.2.3
Cisco Adaptive Security Appliance Software=7.2.4
Cisco Adaptive Security Appliance Software=7.2.5
Cisco Adaptive Security Appliance Software=8.0
Cisco Adaptive Security Appliance Software=8.0\(2\)
Cisco Adaptive Security Appliance Software=8.0\(3\)
Cisco Adaptive Security Appliance Software=8.0\(4\)
Cisco Adaptive Security Appliance Software=8.0\(5\)
Cisco Adaptive Security Appliance Software=8.0.2
Cisco Adaptive Security Appliance Software=8.0.3
Cisco Adaptive Security Appliance Software=8.0.4
Cisco Adaptive Security Appliance Software=8.0.5
Cisco Adaptive Security Appliance Software=8.1
Cisco Adaptive Security Appliance Software=8.2\(1\)
Cisco Adaptive Security Appliance Software=8.2\(2\)
Cisco Adaptive Security Appliance Software=8.2\(3\)
Cisco Adaptive Security Appliance Software=8.2\(3.9\)
Cisco Adaptive Security Appliance Software=8.2\(4\)
Cisco Adaptive Security Appliance Software=8.2\(4.1\)
Cisco Adaptive Security Appliance Software=8.2\(4.4\)
Cisco Adaptive Security Appliance Software=8.2\(5\)
Cisco Adaptive Security Appliance Software=8.2.1
Cisco Adaptive Security Appliance Software=8.2.2
Cisco Adaptive Security Appliance Software=8.2.2-interim
Cisco Adaptive Security Appliance Software=8.2.3
Cisco Adaptive Security Appliance Software=8.3\(1\)
Cisco Adaptive Security Appliance Software=8.3\(2\)
Cisco Adaptive Security Appliance Software=8.3.1
Cisco Adaptive Security Appliance Software=8.3.1-interim
Cisco Adaptive Security Appliance Software=8.3.2
Cisco Adaptive Security Appliance Software=8.4
Cisco Adaptive Security Appliance Software=8.4\(1\)
Cisco Adaptive Security Appliance Software=8.4\(1.11\)
Cisco Adaptive Security Appliance Software=8.4\(2\)
Cisco Adaptive Security Appliance Software=8.4\(2.11\)
Cisco Adaptive Security Appliance Software=8.5
Cisco Adaptive Security Appliance Software=8.6
Cisco Adaptive Security Appliance Software=8.6\(1\)
cisco 5500 Series Adaptive Security Appliance
Event History
Mar 15, 2012
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0358?
CVE-2012-0358 has a CVSS score of 7.8, indicating it is of high severity.
2
How do I fix CVE-2012-0358?
To mitigate CVE-2012-0358, upgrade to the latest version of Cisco Adaptive Security Appliance software that addresses this vulnerability.
3
What is the vulnerability type of CVE-2012-0358?
CVE-2012-0358 is categorized as a buffer overflow vulnerability affecting the Cisco Port Forwarder ActiveX control.
4
Which Cisco products are affected by CVE-2012-0358?
CVE-2012-0358 impacts Cisco Adaptive Security Appliances (ASA) 5500 series devices running specific versions from 7.0 to 8.6.
5
Is there any workaround for CVE-2012-0358?
Until a patch is applied, users can disable or restrict access to the vulnerable ActiveX control to minimize risk.