Buffer overflow in Cisco Telepresence Tc Software

CVE-2014-2171

Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.

Vulnerability class: Buffer Overflow

EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.

Affected products

Cisco Telepresence_tc_software — versions 4.0.0, 4.0.1, 4.0.4
Cisco Telepresence_te_software — versions 4.1.0, 4.1.1, 4.1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)