Cisco Desktop Collaboration Experience DX650 CVE-2013-3399 Local Buffer Overflow Vulnerability

Bugtraq ID:	60907
Class:	Boundary Condition Error
CVE:	CVE-2013-3399
Remote:	No
Local:	Yes
Published:	Jul 01 2013 12:00AM
Updated:	Jul 01 2013 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Desktop Collaboration Experience DX650 10.0(1)
Not Vulnerable:

Cisco Desktop Collaboration Experience DX650 CVE-2013-3399 Local Buffer Overflow Vulnerability

Cisco Desktop Collaboration Experience DX650 is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Local attackers can exploit this issue to run arbitrary code with elevated privileges. Failed exploit attempts can result in a denial-of-service condition.

This issue is being tracked by Cisco Bug IDs CSCuf93957, CSCug22352, and CSCug22462.

Cisco Desktop Collaboration Experience DX650 10.0(1) and prior are vulnerable.

Cisco Desktop Collaboration Experience DX650 CVE-2013-3399 Local Buffer Overflow Vulnerability

An attacker can exploit this issue using readily available tools.

Cisco Desktop Collaboration Experience DX650 CVE-2013-3399 Local Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Desktop Collaboration Experience DX650 CVE-2013-3399 Local Buffer Overflow Vulnerability

References:

• Cisco Desktop Collaboration Experience DX600 Series Potential Code Injection Vul (Cisco)
  
• Cisco Desktop Collaboration Experience DX650 Homepage (Cisco)