Cisco AnyConnect Secure Mobility Client CVE-2015-0662 Local Arbitrary Code Execution Vulnerability

Bugtraq ID:	73123
Class:	Unknown
CVE:	CVE-2015-0662
Remote:	No
Local:	Yes
Published:	Mar 14 2015 12:00AM
Updated:	Mar 14 2015 12:00AM
Credit:	Cisco
Vulnerable:	Cisco AnyConnect Secure Mobility Client 4.0.51 Cisco AnyConnect Secure Mobility Client 4.0.48 Cisco AnyConnect Secure Mobility Client 3.1.6073 Cisco AnyConnect Secure Mobility Client 3.1.5187 Cisco AnyConnect Secure Mobility Client 3.1.5182 Cisco AnyConnect Secure Mobility Client 3.1.2043 Cisco AnyConnect Secure Mobility Client 3.0.9353 Cisco AnyConnect Secure Mobility Client 3.0.9266 Cisco AnyConnect Secure Mobility Client 3.0.9231 Cisco AnyConnect Secure Mobility Client 3.0.5080 Cisco AnyConnect Secure Mobility Client 3.0.5075 Cisco AnyConnect Secure Mobility Client 3.0.4235 Cisco AnyConnect Secure Mobility Client 3.0.3054 Cisco AnyConnect Secure Mobility Client 3.0.3050 Cisco AnyConnect Secure Mobility Client 3.0.2052 Cisco AnyConnect Secure Mobility Client 3.0.1047 Cisco AnyConnect Secure Mobility Client 3.0.629 Cisco AnyConnect Secure Mobility Client 2.5.3055 Cisco AnyConnect Secure Mobility Client 2.5.3054 Cisco AnyConnect Secure Mobility Client 2.5.3051 Cisco AnyConnect Secure Mobility Client 2.5.2019 Cisco AnyConnect Secure Mobility Client 2.5.2018 Cisco AnyConnect Secure Mobility Client 2.5.2017 Cisco AnyConnect Secure Mobility Client 2.5.2014 Cisco AnyConnect Secure Mobility Client 2.5.2011 Cisco AnyConnect Secure Mobility Client 2.5.2010 Cisco AnyConnect Secure Mobility Client 2.5.2006 Cisco AnyConnect Secure Mobility Client 2.5.217 Cisco AnyConnect Secure Mobility Client 2.5 Cisco AnyConnect Secure Mobility Client 2.4.1012 Cisco AnyConnect Secure Mobility Client 2.4.202 Cisco AnyConnect Secure Mobility Client 2.3.2016 Cisco AnyConnect Secure Mobility Client 2.3.1003 Cisco AnyConnect Secure Mobility Client 2.3.254 Cisco AnyConnect Secure Mobility Client 2.3.185 Cisco AnyConnect Secure Mobility Client 2.2.140 Cisco AnyConnect Secure Mobility Client 2.2.136 Cisco AnyConnect Secure Mobility Client 2.2.133 Cisco AnyConnect Secure Mobility Client 2.1.148 Cisco AnyConnect Secure Mobility Client 2.0.343 Cisco AnyConnect Secure Mobility Client 3.1 Cisco AnyConnect Secure Mobility Client 3.0 Cisco AnyConnect Secure Mobility Client 2.5.3046 Cisco AnyConnect Secure Mobility Client 2.5.3041
Not Vulnerable:

Cisco AnyConnect Secure Mobility Client CVE-2015-0662 Local Arbitrary Code Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].