CVE-2012-5445

Published: Dec 28, 2012Modified: Apr 29, 2026

6.8

Vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 3.1 / Impact: 10.0

Source: NVD

Description

The kernel in Cisco Native Unix (CNU) on Cisco Unified IP Phone 7900 series devices (aka TNP phones) with software before 9.3.1-ES10 does not properly validate unspecified system calls, which allows attackers to execute arbitrary code or cause a denial of service (memory overwrite) via a crafted binary.

Affected (156)

Products: Cisco: Skinny Client Control Protocol Software, Unified Ip Phone, Unified Ip Phone 7906g

Cisco

3 products

Skinny Client Control Protocol Software

Unified Ip Phone

Unified Ip Phone 7906g

Configuration A

156 vulnerable

Vulnerable Software	Affected Versions
Cisco Skinny Client Control Protocol Software	Up to 9.2\(4\)
Cisco Skinny Client Control Protocol Software	Version 1.0(1)
Cisco Skinny Client Control Protocol Software	Version 1.0(2)
Cisco Skinny Client Control Protocol Software	Version 1.0(2) sr1
Cisco Skinny Client Control Protocol Software	Version 1.0(3)
Cisco Skinny Client Control Protocol Software	Version 1.0(4)
Cisco Skinny Client Control Protocol Software	Version 1.0(5)
Cisco Skinny Client Control Protocol Software	Version 1.0(9)
Cisco Skinny Client Control Protocol Software	Version 1.1(1)
Cisco Skinny Client Control Protocol Software	Version 1.2(1)
Cisco Skinny Client Control Protocol Software	Version 1.3(1)
Cisco Skinny Client Control Protocol Software	Version 1.3(2)
Cisco Skinny Client Control Protocol Software	Version 1.3(3)
Cisco Skinny Client Control Protocol Software	Version 1.3(4)
Cisco Skinny Client Control Protocol Software	Version 1.3(4) sr1
Cisco Skinny Client Control Protocol Software	Version 1.4(1)
Cisco Skinny Client Control Protocol Software	Version 1.4(2)
Cisco Skinny Client Control Protocol Software	Version 2.0(0)
Cisco Skinny Client Control Protocol Software	Version 2.0(1)
Cisco Skinny Client Control Protocol Software	Version 3.0
Cisco Skinny Client Control Protocol Software	Version 3.0(0)
Cisco Skinny Client Control Protocol Software	Version 3.0(1)
Cisco Skinny Client Control Protocol Software	Version 3.0(2)
Cisco Skinny Client Control Protocol Software	Version 3.1
Cisco Skinny Client Control Protocol Software	Version 3.1(10)
Cisco Skinny Client Control Protocol Software	Version 3.1(11)
Cisco Skinny Client Control Protocol Software	Version 3.1(1)
Cisco Skinny Client Control Protocol Software	Version 3.1(2)
Cisco Skinny Client Control Protocol Software	Version 3.1(3)
Cisco Skinny Client Control Protocol Software	Version 3.1(4)
Cisco Skinny Client Control Protocol Software	Version 3.1(6)
Cisco Skinny Client Control Protocol Software	Version 3.2
Cisco Skinny Client Control Protocol Software	Version 3.2(10)
Cisco Skinny Client Control Protocol Software	Version 3.2(11)
Cisco Skinny Client Control Protocol Software	Version 3.2(12)
Cisco Skinny Client Control Protocol Software	Version 3.2(13)
Cisco Skinny Client Control Protocol Software	Version 3.2(14)
Cisco Skinny Client Control Protocol Software	Version 3.2(15)
Cisco Skinny Client Control Protocol Software	Version 3.2(1)
Cisco Skinny Client Control Protocol Software	Version 3.2(2)
Cisco Skinny Client Control Protocol Software	Version 3.2(3)
Cisco Skinny Client Control Protocol Software	Version 3.2(4)
Cisco Skinny Client Control Protocol Software	Version 3.2(5)
Cisco Skinny Client Control Protocol Software	Version 3.2(6)
Cisco Skinny Client Control Protocol Software	Version 3.2(6a)
Cisco Skinny Client Control Protocol Software	Version 3.2(7)
Cisco Skinny Client Control Protocol Software	Version 3.2(8)
Cisco Skinny Client Control Protocol Software	Version 3.2(9)
Cisco Skinny Client Control Protocol Software	Version 3.3(10)
Cisco Skinny Client Control Protocol Software	Version 3.3(11)
Cisco Skinny Client Control Protocol Software	Version 3.3(12)
Cisco Skinny Client Control Protocol Software	Version 3.3(13)
Cisco Skinny Client Control Protocol Software	Version 3.3(14)
Cisco Skinny Client Control Protocol Software	Version 3.3(15)
Cisco Skinny Client Control Protocol Software	Version 3.3(16)
Cisco Skinny Client Control Protocol Software	Version 3.3(20)
Cisco Skinny Client Control Protocol Software	Version 3.3(2)
Cisco Skinny Client Control Protocol Software	Version 3.3(3)
Cisco Skinny Client Control Protocol Software	Version 3.3(4)
Cisco Skinny Client Control Protocol Software	Version 3.3(5)
Cisco Skinny Client Control Protocol Software	Version 3.3(6)
Cisco Skinny Client Control Protocol Software	Version 3.3(7)
Cisco Skinny Client Control Protocol Software	Version 3.3(8)
Cisco Skinny Client Control Protocol Software	Version 3.3(9)
Cisco Skinny Client Control Protocol Software	Version 4.0(0)
Cisco Skinny Client Control Protocol Software	Version 4.1(2)
Cisco Skinny Client Control Protocol Software	Version 4.1(3)
Cisco Skinny Client Control Protocol Software	Version 4.1(4)
Cisco Skinny Client Control Protocol Software	Version 4.1(5)
Cisco Skinny Client Control Protocol Software	Version 4.1(6)
Cisco Skinny Client Control Protocol Software	Version 4.1(7)
Cisco Skinny Client Control Protocol Software	Version 5.0(0)
Cisco Skinny Client Control Protocol Software	Version 5.0(1a)
Cisco Skinny Client Control Protocol Software	Version 5.0(3)
Cisco Skinny Client Control Protocol Software	Version 5.0(5)
Cisco Skinny Client Control Protocol Software	Version 5.0(6)
Cisco Skinny Client Control Protocol Software	Version 5.0(7)
Cisco Skinny Client Control Protocol Software	Version 6.0(0)
Cisco Skinny Client Control Protocol Software	Version 6.0(2) sr2
Cisco Skinny Client Control Protocol Software	Version 6.0(3)
Cisco Skinny Client Control Protocol Software	Version 6.0(3) sr1
Cisco Skinny Client Control Protocol Software	Version 6.0(4)
Cisco Skinny Client Control Protocol Software	Version 6.0(5)
Cisco Skinny Client Control Protocol Software	Version 6.1(0)
Cisco Skinny Client Control Protocol Software	Version 6.1(1)
Cisco Skinny Client Control Protocol Software	Version 7.0(1)
Cisco Skinny Client Control Protocol Software	Version 7.0(2)
Cisco Skinny Client Control Protocol Software	Version 7.0(2) sr1
Cisco Skinny Client Control Protocol Software	Version 7.0(3)
Cisco Skinny Client Control Protocol Software	Version 7.1(2)
Cisco Skinny Client Control Protocol Software	Version 7.2(2)
Cisco Skinny Client Control Protocol Software	Version 7.2(3)
Cisco Skinny Client Control Protocol Software	Version 7.2(4)
Cisco Skinny Client Control Protocol Software	Version 8.0(10)
Cisco Skinny Client Control Protocol Software	Version 8.0(1)
Cisco Skinny Client Control Protocol Software	Version 8.0(2)
Cisco Skinny Client Control Protocol Software	Version 8.0(3)
Cisco Skinny Client Control Protocol Software	Version 8.0(4)
Cisco Skinny Client Control Protocol Software	Version 8.0(4) sr1
Cisco Skinny Client Control Protocol Software	Version 8.0(4) sr3a
Cisco Skinny Client Control Protocol Software	Version 8.0(5)
Cisco Skinny Client Control Protocol Software	Version 8.0(6)
Cisco Skinny Client Control Protocol Software	Version 8.0(7)
Cisco Skinny Client Control Protocol Software	Version 8.0(8)
Cisco Skinny Client Control Protocol Software	Version 8.0(9)
Cisco Skinny Client Control Protocol Software	Version 8.1(1)
Cisco Skinny Client Control Protocol Software	Version 8.1(2)
Cisco Skinny Client Control Protocol Software	Version 8.2(1)
Cisco Skinny Client Control Protocol Software	Version 8.2(2) sr1
Cisco Skinny Client Control Protocol Software	Version 8.2(2) sr2
Cisco Skinny Client Control Protocol Software	Version 8.2(2) sr3
Cisco Skinny Client Control Protocol Software	Version 8.2(2) sr4
Cisco Skinny Client Control Protocol Software	Version 8.3(1)
Cisco Skinny Client Control Protocol Software	Version 8.3(2)
Cisco Skinny Client Control Protocol Software	Version 8.3(2) sr1
Cisco Skinny Client Control Protocol Software	Version 8.3(3)
Cisco Skinny Client Control Protocol Software	Version 8.3(3) sr1
Cisco Skinny Client Control Protocol Software	Version 8.3(3) sr2
Cisco Skinny Client Control Protocol Software	Version 8.3(5)
Cisco Skinny Client Control Protocol Software	Version 8.4(1)
Cisco Skinny Client Control Protocol Software	Version 8.4(1) sr2
Cisco Skinny Client Control Protocol Software	Version 8.4(2)
Cisco Skinny Client Control Protocol Software	Version 8.4(3)
Cisco Skinny Client Control Protocol Software	Version 8.4(4)
Cisco Skinny Client Control Protocol Software	Version 8.5(2)
Cisco Skinny Client Control Protocol Software	Version 8.5(2) sr1
Cisco Skinny Client Control Protocol Software	Version 8.5(3)
Cisco Skinny Client Control Protocol Software	Version 8.5(3) sr1
Cisco Skinny Client Control Protocol Software	Version 8.5(4)
Cisco Skinny Client Control Protocol Software	Version 8.70
Cisco Skinny Client Control Protocol Software	Version 9.0(2) sr1
Cisco Skinny Client Control Protocol Software	Version 9.0(2) sr2
Cisco Skinny Client Control Protocol Software	Version 9.0(3)
Cisco Skinny Client Control Protocol Software	Version 9.0(3b)
Cisco Skinny Client Control Protocol Software	Version 9.1(1)
Cisco Skinny Client Control Protocol Software	Version 9.1(1) sr1
Cisco Skinny Client Control Protocol Software	Version 9.1(1) sr2
Cisco Skinny Client Control Protocol Software	Version 9.2(1)
Cisco Skinny Client Control Protocol Software	Version 9.2(2)
Cisco Unified Ip Phone	Version 7906g
Cisco Unified Ip Phone	Version 7911g
Cisco Unified Ip Phone	Version 7935
Cisco Unified Ip Phone	Version 7936
Cisco Unified Ip Phone	Version 7940
Cisco Unified Ip Phone	Version 7940g
Cisco Unified Ip Phone	Version 7941g
Cisco Unified Ip Phone	Version 7960
Cisco Unified Ip Phone	Version 7960g
Cisco Unified Ip Phone	Version 7961g
Cisco Unified Ip Phone	Version 7970g
Cisco Unified Ip Phone	Version 7971g
Cisco Unified Ip Phone 7906g	Version 7911g
Cisco Unified Ip Phone 7906g	Version 7941g
Cisco Unified Ip Phone 7906g	Version 7961g
Cisco Unified Ip Phone 7906g	Version 7970g
Cisco Unified Ip Phone 7906g	Version 7971g

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://events.ccc.de/congress/2012/Fahrplan/events/5400.en.html

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-uipphone

Source: psirt@cisco.com

http://events.ccc.de/congress/2012/Fahrplan/events/5400.en.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130109-uipphone

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.