中文描述:

Cisco AnyConnect Secure Mobility Client for Windows是美国思科（Cisco）公司的一款用于Windows平台的可通过任何设备安全访问网络和应用的安全移动客户端。 Cisco AnyConnect Secure Mobility Client for Windows 4.4.02034之前的版本中的DLL文件加载方式存在本地提权漏洞，该漏洞源于在加载DLL文件之前，程序没有充分的对DLL文件的路径和文件名执行输入验证。本地攻击者可通过创建恶意的DLL文件，并将文件安装到系统目录利用该漏洞安装并以Microsoft Windows SYSTEM账户权限运行可执行文件。

英文描述:

A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYSTEM account. The vulnerability is due to incomplete input validation of path and file names of a DLL file before it is loaded. An attacker could exploit this vulnerability by creating a malicious DLL file and installing it in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to the SYSTEM account. The attacker would need valid user credentials to exploit this vulnerability. This vulnerability affects all Cisco AnyConnect Secure Mobility Client for Windows software versions prior to 4.4.02034. Cisco Bug IDs: CSCvc97928.

CWE类型:

标签:

中文解决方案:

英文解决方案:

临时解决方案: