CVE:CVE-2012-0358
CNNVD:CNNVD-201203-266
Cisco Adaptive Security Appliances是可提供安全和VPN服务的模块化平台。
Cisco ASA 5500 Series Adaptive Security Appliances部署的Cisco Clientless VPN解决方案使用客户端系统上的控件执行端口转发操作。如果系统连接到运行VPN解决方案的设备，则运行支持Microsoft ActiveX技术的IE或其他浏览器的Windows系统可能会受到影响。远程未验证的攻击者诱使用户连接到恶意网站后会利用此漏洞执行任意代码。
solution:Upgrade cisco adaptive_security_appliance_software to a higher version than 7.0,7.0(0,7.0(1,7.0(2,7.0(4,7.0(5,7.0(5.2,7.0(6,7.0(6.7,7.0(7,7.0(8,7.0.1,7.0.1.4,7.0.2,7.0.4,7.0.4.3,7.0.5,7.0.6,7.0.7,7.0.8,7.0.8:interim,7.1,7.1(2,7.1(2.5,7.1(2.27,7.1(2.48,7.1(2.49,7.1(5,7.1.1,7.1.2,7.2,7.2(1,7.2(1.22,7.2(2,7.2(2.5,7.2(2.7,7.2(2.8,7.2(2.10,7.2(2.14,7.2(2.15,7.2(2.16,7.2(2.17,7.2(2.18,7.2(2.19,7.2(2.48,7.2(3,7.2(4,7.2(5,7.2.1,7.2.2,7.2.3,7.2.4,7.2.5,8.0,8.0(2,8.0(3,8.0(4,8.0(5,8.0.2,8.0.3,8.0.4,8.0.5,8.1,8.2(1,8.2(2,8.2(3,8.2(3.9,8.2(4,8.2(4.1,8.2(4.4,8.2(5,8.2.1,8.2.2,8.2.2:interim,8.2.3,8.3(1,8.3(2,8.3.1,8.3.1:interim,8.3.2,8.4,8.4(1,8.4(1.11,8.4(2,8.4(2.11,8.5,8.6,8.6(1,and avoid the version 7.0,7.0(0),7.0(1),7.0(2),7.0(4),7.0(5),7.0(5.2),7.0(6),7.0(6.7),7.0(7),7.0(8),7.0.1,7.0.1.4,7.0.2,7.0.4,7.0.4.3,7.0.5,7.0.6,7.0.7,7.0.8,7.0.8:interim,7.1,7.1(2),7.1(2.5),7.1(2.27),7.1(2.48),7.1(2.49),7.1(5),7.1.1,7.1.2,7.2,7.2(1),7.2(1.22),7.2(2),7.2(2.5),7.2(2.7),7.2(2.8),7.2(2.10),7.2(2.14),7.2(2.15),7.2(2.16),7.2(2.17),7.2(2.18),7.2(2.19),7.2(2.48),7.2(3),7.2(4),7.2(5),7.2.1,7.2.2,7.2.3,7.2.4,7.2.5,8.0,8.0(2),8.0(3),8.0(4),8.0(5),8.0.2,8.0.3,8.0.4,8.0.5,8.1,8.2(1),8.2(2),8.2(3),8.2(3.9),8.2(4),8.2(4.1),8.2(4.4),8.2(5),8.2.1,8.2.2,8.2.2:interim,8.2.3,8.3(1),8.3(2),8.3.1,8.3.1:interim,8.3.2,8.4,8.4(1),8.4(1.11),8.4(2),8.4(2.11),8.5,8.6,8.6(1); Upgrade cisco 5500_series_adaptive_security_appliance to a higher version than *