Vulnerabilities > CVE-2006-5278 - Heap Buffer Overflow vulnerability in Cisco products

CVSS 10.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

cisco

critical

NVD

Published: 2007-07-15

Updated: 2019-08-01

Summary

Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Unified Callmanager 3.3 Cisco Unified Callmanager 3.3\(2\) Cisco Unified Callmanager 3.3\(2\)Spb Cisco Unified Callmanager 3.3\(2\)Spc Cisco Unified Callmanager 3.3\(3\) Cisco Unified Callmanager 3.3\(3\)Sr1 Cisco Unified Callmanager 3.3\(3\)Sr4 Cisco Unified Callmanager 3.3\(4\) Cisco Unified Callmanager 3.3\(4\)Sr1A Cisco Unified Callmanager 3.3\(5\) Cisco Unified Callmanager 3.3\(5\)Sr1 Cisco Unified Callmanager 3.3\(5\)Sr1A Cisco Unified Callmanager 3.3\(5\)Sr2 Cisco Unified Callmanager 4.1 Cisco Unified Callmanager 4.1\(2\) Cisco Unified Callmanager 4.1\(3\) Cisco Unified Callmanager 4.1\(3\)Sr1 Cisco Unified Callmanager 4.1\(3\)Sr2 Cisco Unified Callmanager 4.1\(3\)Sr3 Cisco Unified Callmanager 4.1\(3\)Sr4 Cisco Unified Callmanager 4.2 Cisco Unified Callmanager 4.2\(3\)Sr1 Cisco Unified Callmanager 5.0 Cisco Unified Callmanager * Cisco Unified Communications Manager 4.3 Cisco Unified Communications Manager 4.3\(1\)	26

Summary

Vulnerable Configurations

References