Lucene search

MitreCVE-2007-3351

HistoryJun 22, 2007 - 6:30 p.m.

CVE-2007-3351

2007-06-2218:30:00

mitre

web.nvd.nist.gov

sjphone

sip

soft phone

dell axim x3

denial of service

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service (device hang and traffic amplification) via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets.

Affected configurations

Nvd

Node

microsoftwindows_mobileMatch2003

AND

dellaxim_x3

AND

sj_labssjphoneMatch1.60.303c

VendorProductVersionCPE
microsoftwindows_mobile2003cpe:2.3:o:microsoft:windows_mobile:2003:*:*:*:*:*:*:*
dellaxim_x3*cpe:2.3:h:dell:axim_x3:*:*:*:*:*:*:*:*
sj_labssjphone1.60.303ccpe:2.3:a:sj_labs:sjphone:1.60.303c:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_mobile	2003	cpe:2.3:o:microsoft:windows_mobile:2003:::::::*
dell	axim_x3	*	cpe:2.3:h:dell:axim_x3::::::::
sj_labs	sjphone	1.60.303c	cpe:2.3:a:sj_labs:sjphone:1.60.303c:::::::*

References

www.securityfocus.com/bid/24549

www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=217&

exchange.xforce.ibmcloud.com/vulnerabilities/35078

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

Related for CVE-2007-3351