Skip to main content

Cisco TelePresence H.264 Processing Vulnerability

Last Update Date: 18 Apr 2013 16:24 Release Date: 18 Apr 2013 3908 Views

RISK: Medium Risk

TYPE: Clients - Im, Chat & Voip

TYPE: Im, Chat & Voip

A vulnerability was identified in Cisco TelePresence. A remote user can cause denial of service conditions.

 

A remote user can send a specially crafted H.264 bit stream within a Real-Time Transport Protocol (RTP) packet to trigger a flaw in the digital signal processor (DSP) card and cause the target device to reload.


Impact

  • Denial of Service

System / Technologies affected

  • Cisco TelePresence MCU 4500 Series, MCU 4501 Series
  • Cisco TelePresence MCU MSE 8510
  • Cisco TelePresence Server

 


Solutions

Before installation of the software, please visit the software manufacturer web-site for more details. 

  • Apply fix
    • 4.3(2.30) for Cisco TelePresence MCU 4500 Series, MCU 4501 Series and Cisco TelePresence MCU MSE 8510
    • 2.3(1.55) for Cisco TelePresence Server

Vulnerability Identifier


Source


Related Link