Buffer overflow in Cisco Telepresence Tc Software

CVE-2014-2172

Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows local users to gain privileges by leveraging improper handling of the u-boot compiler flag for internal executable files, aka Bug ID CSCub67693.

Vulnerability class: Buffer Overflow

EPSS: 0.003 (26.4th percentile) — read the EPSS interpretation.

Affected products

Cisco Telepresence_tc_software — versions 4.0.0, 4.0.1, 4.0.4
Cisco Telepresence_te_software — versions 4.1.0, 4.1.1, 4.1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)