Lucene search

K
cveMitreCVE-2007-3438
HistoryJun 27, 2007 - 12:30 a.m.

CVE-2007-3438

2007-06-2700:30:00
mitre
web.nvd.nist.gov
22
cve-2007-3438
buffer overflow
nortel
pc client
sip
soft phone
remote code execution

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.8

Confidence

Low

EPSS

0.021

Percentile

89.5%

Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361.

Affected configurations

Nvd
Node
nortelsip_softphoneMatch4.13.5.208
VendorProductVersionCPE
nortelsip_softphone4.13.5.208cpe:2.3:a:nortel:sip_softphone:4.13.5.208:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

7.8

Confidence

Low

EPSS

0.021

Percentile

89.5%

Related for CVE-2007-3438