BlackBerry 7270 Phone SIP堆栈格式串漏洞

BlackBerry 7270 Phone是一款IP电话解决方案。 BlackBerry 7270 Phone处理INVITE消息存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于存在格式串问题，提交包含恶意数据的SIP INVITE消息，可导致程序不能使用，必须重新启动获得正常功能。当漏洞被利用时，设备生成如下错误： "Uncaught exception: java.lang.IllegalArgumentException" BlackBerry Device Software 4.0.1 .83 BlackBerry 7270 0 可联系供应商获得补丁信息：...

Code injection

The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to 1 cause a denial of service device freeze via a malformed SIP message of a certain length or 2 cause a denial of service continuous ring via a malformed SIP message of a certain other length...

Design/Logic Flaw

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...

Buffer overflow

Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service device reboot via a malformed CGI parameter...

CVE-2007-3368

Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service device reboot via a malformed CGI parameter...

CVE-2007-3369

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service device hang or reboot via an INVITE message with a long Via header...

CVE-2007-3349

The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to 1 cause a denial of service device freeze via a malformed SIP message of a certain length or 2 cause a denial of service continuous ring via a malformed SIP message of a certain other length...

CVE-2007-3351

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...

CVE-2007-3361

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...

CVE-2007-3349

The CVE-2007-3349 entry concerns the Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10. The advisory states two remote denial of service outcomes triggered by malformed SIP messages of specific lengths: (1) device freeze and (2) continuous ring. No additional technical det...

CVE-2007-3361

CVE-2007-3361 affects the Nortel PC Client SIP Soft Phone (version 4.1, 3.5.208[20051015]). The vulnerability allows remote attackers to cause a denial of service (device crash) by sending a SIP message with a malformed header. The provided documents do not include exploit code or a specific patc...

CVE-2007-3368

CVE-2007-3368 describes a buffer overflow in the HTTP server of Polycom SoundPoint IP 601 SIP phones with BootROM 3.0.x+ that can be triggered by a malformed CGI parameter, enabling a remote attacker to cause a denial of service (device reboot). The vulnerability affects the HTTP CGI handling and...

CVE-2007-3369

CVE-2007-3369 concerns the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067. A buffer overflow in this combination can be triggered by an INVITE message with a long Via header, allowing a remote attacker to cause a denial of service (device hang or reboot). The N...

CVE-2007-3349

The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to 1 cause a denial of service device freeze via a malformed SIP message of a certain length or 2 cause a denial of service continuous ring via a malformed SIP message of a certain other length...

CVE-2007-3361

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...

CVE-2007-3368

Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service device reboot via a malformed CGI parameter...

CVE-2007-3351

CVE-2007-3351 affects SJPhone SIP soft phone 1.60.303c running on Dell Axim X3 with Windows Mobile 2003. A direct crafted INVITE can cause the device to transmit many RTP packets, resulting in a denial of service (device hang). No remediation or exploit details are provided in the supplied docume...

CVE-2007-3349: Undefined Security Weakness

The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to 1 cause a denial of service device freeze via a malformed SIP message of a certain length or 2 cause a denial of service continuous ring via a malformed SIP message of a certain other length...

CVE-2007-3361: Undefined Security Weakness

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...

CVE-2007-3351: Undefined Security Weakness

The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...