Cisco Jabber for Windows Remote Code Execution Vulnerability in CVE-2014-0666)

Release date:
Updated on:

Affected Systems:
Cisco Jabber for Windows
Description:
--------------------------------------------------------------------------------
Bugtraq id: 64965
CVE (CAN) ID: CVE-2014-0666

Cisco Jabber for Windows is a Unified Communication and collaborative work application.

The Send Screen Capture function of Cisco Jabber for Windows has a security vulnerability that allows unauthenticated remote attackers to install arbitrary files on the target system.

<* Source: Cisco

Link: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Cisco
-----
Cisco has released a Security Bulletin (CVE-2014-0666) and patches for this:
CVE-2014-0666: Cisco Jabber for Windows Remote Code Execution Vulnerability
Link: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666