medium6.8
CVE-2012-5445
The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate…
Impact
The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a crafted binary.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Skinny Client Control Protocol Software | through 9.2\(4\) Versions 1.0\(1\), 1.0\(2\), 1.0\(3\), 1.0\(4\), 1.0\(5\) |
| Cisco | Unified Ip Phone | Versions 7906g, 7911g, 7935, 7936, 7940, 7940g |
| Cisco | Unified Ip Phone 7906g | Versions 7911g, 7941g, 7961g, 7970g, 7971g |
Weakness classification
References
- NVD record
- CVE.org record
- http://events.ccc.de/congress/2012/Fahrplan/events/5400.en.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-uipphone
- http://events.ccc.de/congress/2012/Fahrplan/events/5400.en.html
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-uipphone