CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.6
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: heap-based buffer overflow in ciscod.exe in the cisco security service in cisco anyconnect secure mobility client (aka anyconnect vpn client) allows local users to gain privileges via unspecified vectors, aka bug id cscud14143.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-04-11
Last Modified Date: 2013-04-11