CVE-2012-3935: Buffer Overflow
Published Sep 12, 2012
·Updated
Cisco Unified Presence (CUP) before 8.6(3) and Jabber Extensible Communications Platform (aka Jabber XCP) before 5.3 allow remote attackers to cause a denial of service (process crash) via a crafted XMPP stream header, aka Bug ID CSCtu32832.
Affected Software
33 affected components
Cisco Unified Presence<=8.6\(2\)
Cisco Unified Presence=1.0
Cisco Unified Presence=6.0
Cisco Unified Presence=6.0\(1\)
Cisco Unified Presence=6.0\(2\)
Cisco Unified Presence=6.0\(3\)
Cisco Unified Presence=6.0\(4\)
Cisco Unified Presence=6.0\(5\)
Cisco Unified Presence=6.0\(6\)
Cisco Unified Presence=6.0\(7\)
Cisco Unified Presence=6.0_1
Cisco Unified Presence=6.0_2
Cisco Unified Presence=7.0
Cisco Unified Presence=7.0\(1\)
Cisco Unified Presence=7.0\(2\)
Cisco Unified Presence=7.0\(3\)
Cisco Unified Presence=7.0\(4\)
Cisco Unified Presence=7.0\(5\)
Cisco Unified Presence=7.0\(6\)
Cisco Unified Presence=7.0\(7\)
Cisco Unified Presence=7.0\(8\)
Cisco Unified Presence=7.0\(9\)
Cisco Unified Presence=8.0
Cisco Unified Presence=8.0\(1\)
Cisco Unified Presence=8.0\(2\)
Cisco Unified Presence=8.0\(3\)
Cisco Unified Presence=8.0\(4\)
Cisco Unified Presence=8.5
Cisco Unified Presence=8.5\(1\)
Cisco Unified Presence=8.5\(2\)
Cisco Unified Presence=8.5\(3\)
Cisco Unified Presence=8.6\(1\)
Cisco Jabber Extensible Communications Platform<=5.2
Event History
Sep 12, 2012
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3935?
CVE-2012-3935 has a severity rating that indicates it can lead to a denial of service due to a process crash.
2
How do I fix CVE-2012-3935?
To fix CVE-2012-3935, upgrade to Cisco Unified Presence version 8.6(3) or later and Jabber XCP version 5.3 or later.
3
What systems are affected by CVE-2012-3935?
CVE-2012-3935 affects Cisco Unified Presence versions before 8.6(3) and Jabber XCP versions before 5.3.
4
What type of vulnerability is CVE-2012-3935?
CVE-2012-3935 is categorized as a denial of service vulnerability.
5
What impact does CVE-2012-3935 have on systems?
The impact of CVE-2012-3935 is that it can cause a denial of service, leading to service interruptions for users.