CVE-2013-3468

Published: Aug 29, 2013Modified: Apr 29, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

The Cisco Unified IP Phone 8945 with software 9.3(2) allows remote attackers to cause a denial of service (device hang) via a malformed PNG file, aka Bug ID CSCud04270.

Affected (2)

Products: Cisco: Unified Ip Phone 8945, Unified Ip Phone Firmware

Cisco

2 products

Unified Ip Phone 8945

Unified Ip Phone Firmware

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Ip Phone 8945	All versions
Cisco Unified Ip Phone Firmware	Version 9.3 (2)

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://osvdb.org/96669

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3468

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1028964

Source: psirt@cisco.com

Third Party AdvisoryVDB Entry

http://osvdb.org/96669

Source: af854a3a-2127-422b-91ae-364da2661108

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3468

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1028964

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.