CVE-2014-0666

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-01-16 · updated 2026-06-17
Weakness: CWE-22

Description

Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056.

Affected products

Cisco Jabber: through 9.2\(.1\); 9.0, 9.0(.0), 9.0(.1), 9.0(.2), 9.0(.3), 9.0(.4) (+10)

References

http://osvdb.org/102122
http://secunia.com/advisories/56331
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666
http://tools.cisco.com/security/center/viewAlert.x?alertId=32451
http://www.securityfocus.com/bid/64965
http://www.securitytracker.com/id/1029635
https://exchange.xforce.ibmcloud.com/vulnerabilities/90435
http://osvdb.org/102122
http://secunia.com/advisories/56331
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0666
http://tools.cisco.com/security/center/viewAlert.x?alertId=32451
http://www.securityfocus.com/bid/64965

Get alerted when CVE-2014-0666 or the next vulnerability affects your stack