Cisco Unified IP Phone 8945 Series CVE-2013-3468 Denial of Service Vulnerability

Bugtraq ID:	62029
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-3468
Remote:	Yes
Local:	No
Published:	Aug 28 2013 12:00AM
Updated:	Aug 28 2013 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Unified IP Phone 8945 Series CVE-2013-3468 Denial of Service Vulnerability

Cisco Unified IP Phone 8945 series is prone to a denial-of-service vulnerability.

A remote attacker may exploit this issue to cause denial-of-service conditions.

This issue is tracked by Cisco Bug ID CSCud04270.

Cisco Unified IP Phone 8945 series running firmware version 9.3(2) is vulnerable; other versions may also be affected.

Cisco Unified IP Phone 8945 Series CVE-2013-3468 Denial of Service Vulnerability

An attacker can exploit this issue using a web browser.

Cisco Unified IP Phone 8945 Series CVE-2013-3468 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Unified IP Phone 8945 Series CVE-2013-3468 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Unified IP Phone 8945 Crafted PNG Image Lockup Vulnerability (Cisco)
  
• Cisco Unified IP Phone 8945 Homepage (Cisco)