Cisco Security Agent for Microsoft Windows SMB Remote Buffer Overflow Vulnerability

Cisco Security Agent for Microsoft Windows SMB Remote Buffer Overflow Vulnerability

Cisco Security Agent for Microsoft Windows is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data.

Remote attackers can exploit this issue to execute arbitrary machine code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers. Failed attacks will likely cause denial-of-service conditions.

This issue affects all standalone and managed versions of Cisco Security Agent for Windows.