CVE-2010-3040 – Cisco ICM Setup Manager Agent.exe HandleUpgradeTrace Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2010-3040

07 Nov 2010 — Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll, (2) AgentUpgrade, (3) HandleQueryNodeInfoReq, or (4) HandleUpgradeTrace TCP packet, aka Bug IDs CSCti45698, CSCti45715, CSCti45726, and CSCti46164. Múltiples desbordamientos de búfer basados en pila en Setup Manager en Cisco Intelligent Contact Manager (ICM) anterior v7.0 permite a atacantes ... • http://secunia.com/advisories/42146 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •