PT-2020-7072 · Cisco · Cisco Unified Personal Communicator

Published 2020-01-16 · Updated 2020-01-24 · CVE-2010-3048

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco Unified Personal Communicator version 7.0 (1.13056)

Description The issue is related to a remote denial of service condition. It occurs because the software does not free allocated memory for received data and does not perform validation if memory allocation is successful.

Recommendations For Cisco Unified Personal Communicator version 7.0 (1.13056), at the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2010-3048

Affected Products

Cisco Unified Personal Communicator

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-3048 · Security Note
• http://fuzzmyapp.com/advisories/FMA-2010-002/FMA-2010-002-EN.xml · Note
• https://t.me/cibsecurity/9247 · Telegram Post