Unrated severityNVD Advisory· Published Jul 15, 2007· Updated Apr 23, 2026
CVE-2006-5278
CVE-2006-5278
Description
Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communications Manager (CUCM, formerly CallManager) before 20070711 allow remote attackers to execute arbitrary code via crafted packets, resulting in a heap-based buffer overflow.
Affected products
3cpe:2.3:a:cisco:unified_callmanager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:cisco:unified_callmanager:*:*:*:*:*:*:*:*range: >=3.3,<=3.3\(5\)sr2
- cpe:2.3:a:cisco:unified_callmanager:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*Range: >=4.3,<=4.3\(1\)
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.cisco.com/warp/public/707/cisco-sa-20070711-cucm.shtmlnvdPatchVendor Advisory
- secunia.com/advisories/26043nvdThird Party Advisory
- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/24868nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2007/2512nvdPermissions RequiredThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/19057nvdThird Party AdvisoryVDB Entry
- www.iss.net/threats/271.htmlnvdBroken Link
- www.osvdb.org/36121nvdBroken Link
News mentions
0No linked articles in our index yet.