CVE:CVE-2006-5278
CNNVD:CNNVD-200707-273
Cisco Unified Communications Manager（CUCM，Unified CM，CallManager）是美国思科（Cisco）公司的一款统一通信系统中的呼叫处理组件。该组件提供了一种可扩展、可分布和高可用的企业IP电话呼叫处理解决方案。
Cisco CUCM 20070711之前版本的Real-Time Information Server Data Collector service（RisDC.exe）中存在缓冲区错误漏洞，远程攻击者可利用该漏洞执行任意代码，导致基于堆的缓冲区溢出。
solution:Upgrade cisco unified_callmanager to a higher version than 3.3\(5\sr2,4.1\(3\sr4,4.2\(3\sr1,5.1\(2\,5.0,and avoid the version [3.3,3.3\(5\)sr2],[4.1,4.1\(3\)sr4],[4.2,4.2\(3\)sr1],[5.1,5.1\(2\)],5.0; Upgrade cisco unified_communications_manager to a higher version than 4.3\(1\,and avoid the version [4.3,4.3\(1\)]