CVE:CVE-2011-1637
CNNVD:CNNVD-201106-014
带有9.2.1之前版本软件的Cisco Unified IP Phones 7900设备（又名TNP电话）在加载图像之前，没有正确验证软件图像的签名。本地用户可以借助特制图像获取特权。
solution:Upgrade cisco unified_ip_phone_7906 to a higher version than *; Upgrade cisco unified_ip_phone_7911g to a higher version than *; Upgrade cisco unified_ip_phone_7931g to a higher version than *; Upgrade cisco unified_ip_phone_7941g to a higher version than *; Upgrade cisco unified_ip_phone_7941g-ge to a higher version than *; Upgrade cisco unified_ip_phone_7942g to a higher version than *; Upgrade cisco unified_ip_phone_7945g to a higher version than *; Upgrade cisco unified_ip_phone_7961g to a higher version than *; Upgrade cisco unified_ip_phone_7961g-ge to a higher version than *; Upgrade cisco unified_ip_phone_7962g to a higher version than *; Upgrade cisco unified_ip_phone_7965g to a higher version than *; Upgrade cisco unified_ip_phone_7970g to a higher version than *; Upgrade cisco unified_ip_phone_7971g-ge to a higher version than *; Upgrade cisco unified_ip_phone_7975g to a higher version than *; Upgrade cisco skinny_client_control_protocol_software to a higher version than *:sr1,1.0(1,1.0(2,1.0(2:sr1,1.0(3,1.0(4,1.0(5,1.0(9,1.1(1,1.2(1,1.3(1,1.3(2,1.3(3,1.3(4,1.3(4:sr1,1.4(1,1.4(2,2.0(0,2.0(1,3.0,3.0(0,3.0(1,3.0(2,3.1,3.1(1,3.1(2,3.1(3,3.1(4,3.1(6,3.1(10,3.1(11,3.2,3.2(1,3.2(2,3.2(3,3.2(4,3.2(5,3.2(6,3.2(6a,3.2(7,3.2(8,3.2(9,3.2(10,3.2(11,3.2(12,3.2(13,3.2(14,3.2(15,3.3(2,3.3(3,3.3(4,3.3(5,3.3(6,3.3(7,3.3(8,3.3(9,3.3(10,3.3(11,3.3(12,3.3(13,3.3(14,3.3(15,3.3(16,3.3(20,4.0(0,4.1(2,4.1(3,4.1(4,4.1(5,4.1(6,4.1(7,5.0(0,5.0(1a,5.0(3,5.0(5,5.0(6,5.0(7,6.0(0,6.0(2:sr2,6.0(3,6.0(3:sr1,6.0(4,6.0(5,6.1(0,6.1(1,7.0(1,7.0(2,7.0(2:sr1,7.0(3,7.1(2,7.2(2,7.2(3,7.2(4,8.0(1,8.0(2,8.0(3,8.0(4,8.0(4:sr1,8.0(4:sr3a,8.0(5,8.0(6,8.0(7,8.0(8,8.0(9,8.0(10,8.1(1,8.1(2,8.2(1,8.2(2:sr1,8.2(2:sr2,8.2(2:sr3,8.2(2:sr4,8.3(1,8.3(2,8.3(2:sr1,8.3(3,8.3(3:sr1,8.3(3:sr2,8.3(5,8.4(1,8.4(1:sr2,8.4(2,8.4(3,8.4(4,8.5(2,8.5(2:sr1,8.5(3,8.5(3:sr1,8.5(4,8.70,9.0(2:sr1,9.0(2:sr2,9.0(3,and avoid the version *:sr1,1.0(1),1.0(2),1.0(2):sr1,1.0(3),1.0(4),1.0(5),1.0(9),1.1(1),1.2(1),1.3(1),1.3(2),1.3(3),1.3(4),1.3(4):sr1,1.4(1),1.4(2),2.0(0),2.0(1),3.0,3.0(0),3.0(1),3.0(2),3.1,3.1(1),3.1(2),3.1(3),3.1(4),3.1(6),3.1(10),3.1(11),3.2,3.2(1),3.2(2),3.2(3),3.2(4),3.2(5),3.2(6),3.2(6a),3.2(7),3.2(8),3.2(9),3.2(10),3.2(11),3.2(12),3.2(13),3.2(14),3.2(15),3.3(2),3.3(3),3.3(4),3.3(5),3.3(6),3.3(7),3.3(8),3.3(9),3.3(10),3.3(11),3.3(12),3.3(13),3.3(14),3.3(15),3.3(16),3.3(20),4.0(0),4.1(2),4.1(3),4.1(4),4.1(5),4.1(6),4.1(7),5.0(0),5.0(1a),5.0(3),5.0(5),5.0(6),5.0(7),6.0(0),6.0(2):sr2,6.0(3),6.0(3):sr1,6.0(4),6.0(5),6.1(0),6.1(1),7.0(1),7.0(2),7.0(2):sr1,7.0(3),7.1(2),7.2(2),7.2(3),7.2(4),8.0(1),8.0(2),8.0(3),8.0(4),8.0(4):sr1,8.0(4):sr3a,8.0(5),8.0(6),8.0(7),8.0(8),8.0(9),8.0(10),8.1(1),8.1(2),8.2(1),8.2(2):sr1,8.2(2):sr2,8.2(2):sr3,8.2(2):sr4,8.3(1),8.3(2),8.3(2):sr1,8.3(3),8.3(3):sr1,8.3(3):sr2,8.3(5),8.4(1),8.4(1):sr2,8.4(2),8.4(3),8.4(4),8.5(2),8.5(2):sr1,8.5(3),8.5(3):sr1,8.5(4),8.70,9.0(2):sr1,9.0(2):sr2,9.0(3)