high7.8
CVE-2012-3935
Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial o…
Impact
Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Unified Presence | through 8.6\(2\) Versions 1.0, 6.0, 6.0\(1\), 6.0\(2\), 6.0\(3\) |
| Cisco | Jabber Extensible Communications Platform | through 5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/85421
- http://secunia.com/advisories/50562
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp
- http://www.securitytracker.com/id?1027520
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78457
- http://osvdb.org/85421
- http://secunia.com/advisories/50562
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120912-cupxcp
- http://www.securitytracker.com/id?1027520
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78457