CVE-2006-5277
- State
- Published
- Severity
- Not scored
- Published
- Jul 15, 2007
- Updated
- Aug 7, 2024
- Reserved
- Oct 13, 2006
Description
Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via a crafted packet that triggers a heap-based buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 36122vdb-entry
- 20070711 Cisco Unified Communications Manager Overflow Vulnerabilitiesvendor-advisory
- ADV-2007-2512vdb-entry
- 20070711 Cisco Call Manager CTLProvider.exe Remote Code Executionthird-party-advisory
- 26043third-party-advisory
- 24868vdb-entry
- voip-filename-overflow(31437)vdb-entry
- 1018369vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.