Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco Secure Desktop ‘WebLaunch’功能任意代码执行漏洞
Vulnerability Description
Cisco Secure Desktop（CSD）是美国思科（Cisco）公司的一款安全桌面产品，它可通过加密功能降低远程用户注销后或SSL VPN会话超时后Cookies、浏览器历史记录、临时文件和下载内容在系统上所遗留的风险。 Cisco Secure Desktop 3.6.6020之前版本中的WebLaunch功能中存在漏洞，该漏洞源于下载过程中没有正确验证接收到的二进制文件。远程攻击者可利用该漏洞通过涉及(1)ActiveX或(2)Java组件的向量，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A