CVE-2013-5559: Buffer Overflow

Published Nov 4, 2013

Updated

Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.

Affected Software

43 affected components

cisco AnyConnect Secure Mobility Client=2.0

cisco AnyConnect Secure Mobility Client=2.1

cisco AnyConnect Secure Mobility Client=2.2

cisco AnyConnect Secure Mobility Client=2.2.128

cisco AnyConnect Secure Mobility Client=2.2.133

cisco AnyConnect Secure Mobility Client=2.2.136

cisco AnyConnect Secure Mobility Client=2.2.140

cisco AnyConnect Secure Mobility Client=2.3

cisco AnyConnect Secure Mobility Client=2.3.185

cisco AnyConnect Secure Mobility Client=2.3.254

cisco AnyConnect Secure Mobility Client=2.3.2016

cisco AnyConnect Secure Mobility Client=2.4

cisco Anyconnect Secure Mobility Client Symbian Os=2.4

cisco AnyConnect Secure Mobility Client=2.4.0202

cisco AnyConnect Secure Mobility Client=2.4.1012

cisco Anyconnect Secure Mobility Client Iphone Os=2.4.4004

cisco Anyconnect Secure Mobility Client Iphone Os=2.4.4014

cisco Anyconnect Secure Mobility Client Symbian Os=2.4.5004

cisco Anyconnect Secure Mobility Client Android=2.4.7030

cisco Anyconnect Secure Mobility Client Android=2.4.7073

cisco AnyConnect Secure Mobility Client=2.5

cisco AnyConnect Secure Mobility Client=2.5.0217

cisco AnyConnect Secure Mobility Client=2.5.1025

cisco AnyConnect Secure Mobility Client=2.5.2001

cisco AnyConnect Secure Mobility Client=2.5.2006

cisco AnyConnect Secure Mobility Client=2.5.2010

cisco AnyConnect Secure Mobility Client=2.5.2011

cisco AnyConnect Secure Mobility Client=2.5.2014

cisco AnyConnect Secure Mobility Client=2.5.2017

cisco AnyConnect Secure Mobility Client=2.5.2018

cisco AnyConnect Secure Mobility Client=2.5.2019

cisco AnyConnect Secure Mobility Client=2.5.3041

cisco AnyConnect Secure Mobility Client=2.5.3046

cisco AnyConnect Secure Mobility Client=2.5.3051

cisco AnyConnect Secure Mobility Client=2.5.3054

cisco AnyConnect Secure Mobility Client=2.5.3055

cisco Anyconnect Secure Mobility Client Iphone Os=2.5.5112

cisco Anyconnect Secure Mobility Client Android=2.5.5116

cisco Anyconnect Secure Mobility Client Android=2.5.5118

cisco Anyconnect Secure Mobility Client Android=2.5.5125

cisco Anyconnect Secure Mobility Client Iphone Os=2.5.5130

cisco Anyconnect Secure Mobility Client Android=2.5.5131

cisco AnyConnect Secure Mobility Client=2.5.6005

Event History

Nov 4, 2013

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5559?

CVE-2013-5559 has a severity rating of critical due to its potential for remote code execution.

How do I fix CVE-2013-5559?

To fix CVE-2013-5559, update the Cisco AnyConnect Secure Mobility Client to the latest version provided by Cisco.

What types of devices are affected by CVE-2013-5559?

CVE-2013-5559 affects multiple versions of the Cisco AnyConnect Secure Mobility Client across various platforms including Windows, macOS, and mobile operating systems.

Can CVE-2013-5559 be exploited without user interaction?

CVE-2013-5559 requires user interaction, as it is triggered by opening a crafted HTML document.

What is the impact of CVE-2013-5559 if exploited?

If successfully exploited, CVE-2013-5559 allows attackers to execute arbitrary code on the affected system.