Buffer overflow in Cisco Intelligent Contact Manager
CVE-2010-3040
Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll, (2) AgentUpgrade, (3) HandleQueryNodeInfoReq, or (4) HandleUpgradeTrace TCP packet, aka Bug IDs CSCti45698, CSCti45715, CSCti45726, and CSCti46164.
Vulnerability class: Buffer Overflow
EPSS: 0.080 (94.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Intelligent_contact_manager — versions 5.0\(0\)_sr5, 6.0\(0\)_sr1, 6.0\(0\)_sr3
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_MISC)
- psirt@cisco.com (x_refsource_MISC)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (x_refsource_MISC)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_MISC)