CVE-2011-3288 XML external entity in n/a

High 7.5 Published 6 Oct 2011 Updated 16 Sep 2024

Remote attackers can cause denial of service via crafted XML documents exploiting improper entity expansion in Cisco Unified Presence.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2011-3288?

CVE-2011-3288 is a high-severity vulnerability in n/a, published on 6 Oct 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug IDs CSCtq89842 and CSCtq88547, a similar issue to CVE-2003-1564.

Weakness: CWE-776

Which versions are affected by CVE-2011-3288?

It affects 1 product.

Products include Cisco Unified Presence.

How do I fix CVE-2011-3288?

No fix has been published for CVE-2011-3288 yet. Limit exposure of the affected software until one is available.

Is CVE-2011-3288 being exploited?

There is no known exploitation of CVE-2011-3288 in the wild and no public exploit code.

Sources

Also known as GHSA-66wf-g54m-27m7.