CVE-2014-2171

Heap-based buffer overflow in Cisco TelePresence TC Software 4.x through 6.x before 6.0.1 and TE Software 4.x and 6.0.x before 6.0.2 allows remote attackers to execute arbitrary code via crafted SIP packets, aka Bug ID CSCud81796.

Score

CVSS 2.0 10.0 Critical

Status

Modified - psirt@cisco.com

Published

2014-05-02

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Telepresence Tc Software (Cisco)
• Telepresence Te Software (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140430-tcte