CVEvulnerability

CVE-2010-3040

10.0 HIGH Published 2010-11-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2010-11-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll, (2) AgentUpgrade, (3) HandleQueryNodeInfoReq, or (4) HandleUpgradeTrace TCP packet, aka Bug IDs CSCti45698, CSCti45715, CSCti45726, and CSCti46164.

Affected configurations

• cisco intelligent contact manager (<= 6.0\(0\)a\(1\)) • cisco intelligent contact manager 5.0 • cisco intelligent contact manager 5.0\(0\) • cisco intelligent contact manager 5.0\(0\) sr2 • cisco intelligent contact manager 5.0\(0\) sr3 • cisco intelligent contact manager 5.0\(0\) sr4 • cisco intelligent contact manager 5.0\(0\) sr5 • cisco intelligent contact manager 5.0\(0\) sr7 • cisco intelligent contact manager 5.0\(0\) sr8 • cisco intelligent contact manager 5.0\(0\) sr9 • cisco intelligent contact manager 5.0\(0\) sr10 • cisco intelligent contact manager 5.0\(0\) sr11 • cisco intelligent contact manager 5.0\(0\) sr12 • cisco intelligent contact manager 5.0\(0\) sr13 • cisco intelligent contact manager 5.0\(0\)a • cisco intelligent contact manager 6.0\(0\) • cisco intelligent contact manager 6.0\(0\) sr1 • cisco intelligent contact manager 6.0\(0\) sr2 • cisco intelligent contact manager 6.0\(0\) sr3 • cisco intelligent contact manager 6.0\(0\) sr4 • cisco intelligent contact manager 6.0\(0\) sr5 • cisco intelligent contact manager 6.0\(0\) sr6 • cisco intelligent contact manager 6.0\(0\) sr7 • cisco intelligent contact manager 6.0\(0\) sr8 • cisco intelligent contact manager 6.0\(0\) sr9 • cisco intelligent contact manager 6.0\(0\) sr10 • cisco intelligent contact manager 6.0\(0\)a

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References