EUVD-2007-3276

Malware in sbrugna...

EUVD-2008-6111

Malware in sbrugna...

Nortel Networks UNIStim IP Softphone 2050 RTCP Port Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26118/info Nortel Networks UNIStim IP Softphone is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory...

CVE-2008-6141

Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service crash via a large amount of H.323 data...

Code injection

Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service crash via a large amount of H.323 data...

CVE-2008-6141

Avaya IP Softphone vulnerable: Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 can be triggered by a large amount of H.323 data, causing a remote denial of service (crash). The available documents do not specify the root cause details, affected subcomponents, or concrete explo...

CVE-2008-6141

Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service crash via a large amount of H.323 data...

CVE-2008-6141: Undefined Security Weakness

Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service crash via a large amount of H.323 data...

CVE-2007-5637

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode."...

Buffer overflow

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

CVE-2007-5637

The CVE-2007-5637 entry applies to Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and related Nortel products (IP Phone, BCM, and other lines). The vulnerability is described as remote eavesdropping on the physical environment via an Open Audio Stream message that enables a surveillance mode. ...

CVE-2007-5636

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

CVE-2007-5639

The CVE-2007-5639 entry concerns Nortel UNIStim family devices (Nortel UNIStim IP Softphone 2050, IP Phone 1140E, plus other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets). The vulnerability allows remote attackers to cause a denial of service (device hang) by sending a flood of Mute/Un...

CVE-2007-5640

The CVE-2007-5640 issue affects Nortel UNIStim products (e.g., UNIStim IP Softphone 2050, IP Phone 1140E and related lines such as BCM and Mobile Voice Client). A resume message to the Signaling Server with a spoofed source IP can allow remote attackers to block calls and force re-registration; t...

CVE-2007-5636

The CVE-2007-5636 entry concerns a buffer overflow in Nortel UNIStim IP Softphone 2050. A remote attacker can trigger the overflow by sending a flood of invalid characters to the RTCP port (5678/udp), potentially causing the application to abort and possibly allowing arbitrary code execution. The...

CVE-2007-5640: Undefined Security Weakness

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, Mobile Voice Client, and other product lines, allow remote attackers to block calls and force re-registration via a resume message to the Signaling Server...

CVE-2007-5636: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...

CVE-2007-5638: Exposure of Sensitive Information to an Unauthorized Actor

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines, use only 65536 different values in the 32-bit ID number field of an RUDP datagram, which makes it easier for remote attackers to...

CVE-2007-5639: Undefined Security Weakness

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service device hang via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server...

CVE-2007-5637: Exposure of Sensitive Information to an Unauthorized Actor

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP Phone, Business Communications Manager BCM, and other product lines allow remote attackers to eavesdrop on the physical environment via an Open Audio Stream message that enables "surveillance mode."...