CVE-2013-5559

medium
Published 2013-11-04 · Modified 2026-04-29
CVSS v3
CVSS v2
6.8
VIR risk
6.8

Description

Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@cisco.com — http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5559

Application impact

VendorProductVersionsFixed
cisco ciscoanyconnect_secure_mobility_client2.0
cisco ciscoanyconnect_secure_mobility_client2.1
cisco ciscoanyconnect_secure_mobility_client2.2
cisco ciscoanyconnect_secure_mobility_client2.2.128
cisco ciscoanyconnect_secure_mobility_client2.2.133
cisco ciscoanyconnect_secure_mobility_client2.2.136
cisco ciscoanyconnect_secure_mobility_client2.2.140
cisco ciscoanyconnect_secure_mobility_client2.3
cisco ciscoanyconnect_secure_mobility_client2.3.185
cisco ciscoanyconnect_secure_mobility_client2.3.254
cisco ciscoanyconnect_secure_mobility_client2.3.2016
cisco ciscoanyconnect_secure_mobility_client2.4
cisco ciscoanyconnect_secure_mobility_client2.4.0202
cisco ciscoanyconnect_secure_mobility_client2.4.1012
cisco ciscoanyconnect_secure_mobility_client2.4.4004
cisco ciscoanyconnect_secure_mobility_client2.4.4014
cisco ciscoanyconnect_secure_mobility_client2.4.5004
cisco ciscoanyconnect_secure_mobility_client2.4.7030
cisco ciscoanyconnect_secure_mobility_client2.4.7073
cisco ciscoanyconnect_secure_mobility_client2.5
cisco ciscoanyconnect_secure_mobility_client2.5.0217
cisco ciscoanyconnect_secure_mobility_client2.5.1025
cisco ciscoanyconnect_secure_mobility_client2.5.2001
cisco ciscoanyconnect_secure_mobility_client2.5.2006
cisco ciscoanyconnect_secure_mobility_client2.5.2010
cisco ciscoanyconnect_secure_mobility_client2.5.2011
cisco ciscoanyconnect_secure_mobility_client2.5.2014
cisco ciscoanyconnect_secure_mobility_client2.5.2017
cisco ciscoanyconnect_secure_mobility_client2.5.2018
cisco ciscoanyconnect_secure_mobility_client2.5.2019
cisco ciscoanyconnect_secure_mobility_client2.5.3041
cisco ciscoanyconnect_secure_mobility_client2.5.3046
cisco ciscoanyconnect_secure_mobility_client2.5.3051
cisco ciscoanyconnect_secure_mobility_client2.5.3054
cisco ciscoanyconnect_secure_mobility_client2.5.3055
cisco ciscoanyconnect_secure_mobility_client2.5.5112
cisco ciscoanyconnect_secure_mobility_client2.5.5116
cisco ciscoanyconnect_secure_mobility_client2.5.5118
cisco ciscoanyconnect_secure_mobility_client2.5.5125
cisco ciscoanyconnect_secure_mobility_client2.5.5130
cisco ciscoanyconnect_secure_mobility_client2.5.5131
cisco ciscoanyconnect_secure_mobility_client2.5.6005

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.