CVE-2006-5278

Currently unrated

Key Information:

Vendor
Cisco
Status
Unified Callmanager
Unified Communications Manager
Vendor
CVE Published:
15 July 2007

Summary

Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/19057
vdb-entryx_refsource_XF
http://www.iss.net/threats/271.html
third-party-advisoryx_refsource_ISS
http://www.cisco.com/warp/public/707/cisco-sa-20070711-cu...
vendor-advisoryx_refsource_CISCO

EPSS Score

27% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.