CVE-2010-3048 Null dereference in Unified Personal Communicator
Remote attackers can cause a denial of service in Cisco Unified Personal Communicator due to improper memory allocation validation and failure to free memory.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2010-3048?
CVE-2010-3048 is a high-severity vulnerability in Cisco Unified Personal Communicator, published on 16 Jan 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Cisco Unified Personal Communicator 7.0 (1.13056) does not free allocated memory for received data and does not perform validation if memory allocation is successful, causing a remote denial of service condition.
Weakness: CWE-476
Which versions are affected by CVE-2010-3048?
It affects 1 product.
Products include Cisco Unified Personal Communicator.
How do I fix CVE-2010-3048?
No fix has been published for CVE-2010-3048 yet. Limit exposure of the affected software until one is available.
Is CVE-2010-3048 being exploited?
There is no known exploitation of CVE-2010-3048 in the wild and no public exploit code.
Sources
Also known as GHSA-rq69-pg5q-r2x8.