20120314 Cisco ASA 5500 Series Adaptive Security Appliance Clientless VPN ActiveX Control Remote Code Execution Vulnerability

VU#339177

1026799

cisco-asa-activex-bo(74027)

The remote Windows host is missing a kill bit for an ActiveX control that is known to contain vulnerabilities.

If this ActiveX control is ever installed on the remote host, either now or in the future, it would expose the host to various security issues.

Note that the affected control is from a third-party vendor that has asked Microsoft to prevent their control from being run in Internet Explorer.

The remote Windows host has a version of the Cisco AnyConnect Portforwarder ActiveX control installed that contains a buffer overflow in its initialization parameters.  A remote attacker could exploit this by tricking a user into viewing a specially crafted HTML document, resulting in arbitrary code execution.

ID	Name	Product	Family	Severity
59044	MS 2695962: Update Rollup for ActiveX Kill Bits (2695962)	Nessus	Windows	high
58512	Cisco AnyConnect Portforwarder ActiveX Control Initialization Parameter Parsing Buffer Overflow	Nessus	Windows	high

CVE-2012-0358

high

Tenable Plugins

high

high