KLA10106 ACE vulnerability in Cisco Secure Desktop

An improperly downloaded files verification vulnerability was found in Cisco Security Desktop. By exploiting this vulnerability malicious users can Execute Arbitrary Code. This vulnerability can be exploited from the network at a point related to Web Install via a specially designed web page.

Original advisories

Cisco Bulletin

Related products

Cisco-Secure-Desktop

CVE list

CVE-2010-0589 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Cisco Secure Desktop versions 3.5 and earlier