CVE-2012-3935

high

Published 2012-09-12 · Modified 2026-04-29

CVSS v3

—

CVSS v2

7.8

VIR risk

7.8

Description

Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Application impact

Vendor	Product	Versions
cisco	unified_presence	`{"endIncluding":"8.6\\(2\\)"}`
cisco	unified_presence	`1.0`
cisco	unified_presence	`6.0`
cisco	unified_presence	`6.0\(1\)`
cisco	unified_presence	`6.0\(2\)`
cisco	unified_presence	`6.0\(3\)`
cisco	unified_presence	`6.0\(4\)`
cisco	unified_presence	`6.0\(5\)`
cisco	unified_presence	`6.0\(6\)`
cisco	unified_presence	`6.0\(7\)`
cisco	unified_presence	`6.0_1`
cisco	unified_presence	`6.0_2`
cisco	unified_presence	`7.0`
cisco	unified_presence	`7.0\(1\)`
cisco	unified_presence	`7.0\(2\)`
cisco	unified_presence	`7.0\(3\)`
cisco	unified_presence	`7.0\(4\)`
cisco	unified_presence	`7.0\(5\)`
cisco	unified_presence	`7.0\(6\)`
cisco	unified_presence	`7.0\(7\)`
cisco	unified_presence	`7.0\(8\)`
cisco	unified_presence	`7.0\(9\)`
cisco	unified_presence	`8.0`
cisco	unified_presence	`8.0\(1\)`
cisco	unified_presence	`8.0\(2\)`
cisco	unified_presence	`8.0\(3\)`
cisco	unified_presence	`8.0\(4\)`
cisco	unified_presence	`8.5`
cisco	unified_presence	`8.5\(1\)`
cisco	unified_presence	`8.5\(2\)`
cisco	unified_presence	`8.5\(3\)`
cisco	unified_presence	`8.6\(1\)`
cisco	jabber_extensible_communications_platform	`{"endIncluding":"5.2"}`

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.