Multiple stack-based buffer overflows in agent.exe in Setup Manager in Cisco Intelligent Contact Manager (ICM) before 7.0 allow remote attackers to execute arbitrary code via a long parameter in a (1) HandleUpgradeAll (2) AgentUpgrade (3) HandleQueryNodeInfoReq or (4) HandleUpgradeTrace TCP packet aka Bug IDs CSCti45698 CSCti45715 CSCti45726 and CSCti46164.