CVE:CVE-2012-3935
CNNVD:CNNVD-201209-225
Cisco Unified Presence是美国思科（Cisco）公司的一个基于标准的平台，能够收集有关用户可用性和通信功能的信息，以提供统一用户在网状态，为思科统一通信和关键业务应用提供支持基于在网状态的通信。Cisco Jabber XCP是一款可扩展通信平台。
Cisco Unified Presence (CUP)8.6(3)之版本和Jabber Extensible Communications Platform (又名Jabber XCP) 5.3之前的版本中存在漏洞。远程攻击者可利用该漏洞通过特制的XMPP流头，导致拒绝服务（进程崩溃）。
solution:Upgrade cisco unified_presence to a higher version than 8.6\(2\,1.0,6.0,6.0(1,6.0(2,6.0(3,6.0(4,6.0(5,6.0(6,6.0(7,6.0_1,6.0_2,7.0,7.0(1,7.0(2,7.0(3,7.0(4,7.0(5,7.0(6,7.0(7,7.0(8,7.0(9,8.0,8.0(1,8.0(2,8.0(3,8.0(4,8.5,8.5(1,8.5(2,8.5(3,8.6(1,and avoid the version (,8.6\(2\)],1.0,6.0,6.0(1),6.0(2),6.0(3),6.0(4),6.0(5),6.0(6),6.0(7),6.0_1,6.0_2,7.0,7.0(1),7.0(2),7.0(3),7.0(4),7.0(5),7.0(6),7.0(7),7.0(8),7.0(9),8.0,8.0(1),8.0(2),8.0(3),8.0(4),8.5,8.5(1),8.5(2),8.5(3),8.6(1); Upgrade cisco jabber_extensible_communications_platform to a higher version than 5.2,and avoid the version (,5.2]