Buffer overflow in Cisco Telepresence Tc Software

CVE-2014-2168

Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804.

Vulnerability class: Buffer Overflow

EPSS: 0.028 (84.7th percentile) — read the EPSS interpretation.

Affected products

Cisco Telepresence_tc_software — versions 4.0.0, 4.0.1, 4.0.4
Cisco Telepresence_te_software — versions 4.1.0, 4.1.1, 4.1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)