VDB

GCVE-110-CERTCC-2011-339177

GCVE-110-CERTCC-2011-339177
Advisory PublishedCVSS 9.3/10
Vulnetix · Advisory published March 14, 2012
The Cisco AnyConnect ActiveX control contains a buffer overflow vulnerability, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system.
Download JSON Open in Console

Risk Scores

CVSS 2.0
9.3/10
Critical · AV:N/AC:M/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact15population11exploitation0widely_known1score_current11.026125ease_of_exploitation18
certcc-vrda
certcc-vrda
d1_impact4d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7.3remediation_levelOFreport_confidenceCenvironmental_score5.48031772512target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2012-0358

Transitive aliases

cisco-sa-20120314-asaclientGSD-2012-0358GHSA-q7hf-qx95-6q2pVAR-201203-0221

References

Cisco AnyConnect Clientless SSL VPN Portforwarder ActiveX control buffer overflow
url
Cisco AnyConnect Clientless SSL VPN Portforwarder ActiveX control buffer overflow
url
Cisco AnyConnect Clientless SSL VPN Portforwarder ActiveX control buffer overflow
url
Cisco AnyConnect Clientless SSL VPN Portforwarder ActiveX control buffer overflow
advisory
Cisco AnyConnect Clientless SSL VPN Portforwarder ActiveX control buffer overflow
advisory

Browse GCVE Records

73,044 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›