CVE-2012-5416
high
CVSS v3
—
CVSS v2
7.8
VIR risk
7.8
Description
Buffer overflow in Cisco Unified MeetingPlace Web Conferencing before 7.1MR1 Patch 1, 8.0 before 8.0MR1 Patch 1, and 8.5 before 8.5MR3 allows remote attackers to cause a denial of service (daemon hang) via unspecified parameters in a POST request, aka Bug ID CSCua66341.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: psirt@cisco.com — http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-mp
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| cisco | unified_meetingplace | {"endIncluding":"7.1"} | |
| cisco | unified_meetingplace | 7.0 | |
| cisco | unified_meetingplace | 7.0.1 | |
| cisco | unified_meetingplace | 7.0.2 | |
| cisco | unified_meetingplace | 7.0.3 | |
| cisco | unified_meetingplace | 7.1 | |
| cisco | unified_meetingplace | 8.0 | |
| cisco | unified_meetingplace | 8.5 | |
| cisco | unified_meetingplace | 8.5.1 | |
| cisco | unified_meetingplace | 8.5.2 | |
| cisco | unified_meetingplace | 8.5.3 | |
| cisco | unified_meetingplace | 8.5.4 | |
References
- http://osvdb.org/86859
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-mp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79721
- http://osvdb.org/86859
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20121031-mp
- https://exchange.xforce.ibmcloud.com/vulnerabilities/79721
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.