Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.106371
Category:CISCO
Title:Cisco Meeting Server Session Description Protocol Media Lines Buffer Overflow Vulnerability
Summary:A vulnerability in the Session Description Protocol (SDP) parser of Cisco;Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system.
Description:Summary:
A vulnerability in the Session Description Protocol (SDP) parser of Cisco
Meeting Server could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system.

Vulnerability Insight:
The vulnerability exists because the affected software performs incomplete
input validation of the size of media lines in session descriptions. An attacker could exploit this vulnerability
by sending crafted packets to the SDP parser on an affected system.

Vulnerability Impact:
A successful exploit could allow the attacker to cause a buffer overflow
condition on an affected system, which could allow the attacker to execute arbitrary code on the system.

Solution:
Update to version 2.0.3 or later.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2016-6448
BugTraq ID: 94076
http://www.securityfocus.com/bid/94076
http://www.securitytracker.com/id/1037181
CopyrightCopyright (C) 2016 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.