CVE-2013-1161 - The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of service (blocked connection) by leveraging an entry on a Buddy list and sending a crafted XMPP presence update message, aka Bug ID CSCue38383

Back Back to CVE browser

MEDIUM

The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of service (blocked connection) by leveraging an entry on a Buddy list and sending a crafted XMPP presence update message, aka Bug ID CSCue38383

Published Mar 26, 2013

6.3

MEDIUM

CVSS 2.0

EPSS 0.93%

Description

The XML parser in the Cisco Jabber IM application for Android allows remote authenticated users to cause a denial of service (blocked connection) by leveraging an entry on a Buddy list and sending a crafted XMPP presence update message, aka Bug ID CSCue38383.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1161
vendor-advisoryx_refsource_CISCOVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1201
Advisory

Link	Providers	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1161		vendor-advisoryx_refsource_CISCOVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1201		Advisory