Login Request a demo
Unscored severity · published Jan 16, 2014
CVE-2014-0666
Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
Jabber · Cisco
through 9.2\(.1\); 9.0; 9.0(.0); 9.0(.1); 9.0(.2); 9.0(.3); +11 more · source: NVD
Affected product
JA
Jabber
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-0666
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-0666
osvdb.org
http://osvdb.org/102122
secunia.com
http://secunia.com/advisories/56331
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32451
Third Party Advisory
http://www.securityfocus.com/bid/64965
Third Party Advisory
http://www.securitytracker.com/id/1029635
More from Jabber
9.9
CVE-2021-1411
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
9.9
CVE-2020-26085
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying…
9.9
CVE-2020-27134
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying…
9.9
CVE-2020-27133
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying…
9.9
CVE-2020-27132
Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying…