120 matches found
Null pointer dereference
pcapsipdump.cpp in pcapsipdump before 0.1.3 allows remote attackers to cause a denial of service application crash via a malformed SIP packet, which results in a NULL pointer dereference...
CVE-2007-1650
The CVE-2007-1650 issue affects pcapsipdump (pcapsipdump.cpp) before version 0.1.3. A malformed SIP packet can be received remotely, triggering a NULL pointer dereference and causing the application to crash (DoS). The NVD entry reports a network attack vector with low complexity and no authentic...
Cisco 7940 IP Phone denial of service
Crash on malformed INVITE SIP packet...
CVE-2007-1306
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service crash by sending a Session Initiation Protocol SIP packet without a URI and SIP-version header, which results in a NULL pointer dereference...
CVE-2006-4029
Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet...
CVE-2006-4029
Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet...
CVE-2006-4029
AGEphone 1.24 and 1.38.1 are affected by a stack-based buffer overflow in sipd.dll that can be triggered by a crafted UDP SIP packet. This vulnerability allows remote attackers to execute arbitrary code. Affected component: sipd.dll within AGEphone. Root cause: stack-based overflow in the SIP pac...
[Full-disclosure] [vuln.sg] AGEphone "sipd.dll" SIP Packet Handling Buffer Overflow
vuln.sg Vulnerability Research Advisory AGEphone "sipd.dll" SIP Packet Handling Buffer Overflow by Tan Chew Keong Release Date: 2006-07-25 Summary ------- A vulnerability has been found in AGEphone. When exploited, the vulnerability allows execution of arbitrary code with privileges of the AGEpho...
AGEphone 1.28/1.38 - SIP Packet Handling Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/19148/info AGEphone is prone to a remote buffer-overflow vulnerability. Specifically, this issue presents itself when the application handles a malicious SIP Session Initiation Protocol packet. AGEphone versions 1.24 and 1.38.1 are reported vulnerable;...
eStara SoftPhone 3.0.1 SIP Packet - Multiple Malformed Field Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. For the negative 'Expires' field issue: OPTIONS sip:[email protected] SIP/2.0 Via...
CounterPath eyeBeam software SIP IP Phone DoS
Buffer overflow on oversized SIP packet header name...
CVE-2006-0189
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...
Buffer overflow
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...
CVE-2006-0189
CVE-2006-0189 involves eStara SoftPhone. The vulnerability is a buffer overflow in SoftPhone versions 3.0.1.14 through 3.0.1.46 triggered by long SDP attributes (a=) inside SIP data carried over UDP port 5060. An unauthenticated remote attacker could potentially execute arbitrary code on the remo...
CVE-2006-0189
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute aka "a" field in the SDP data of a SIP packet on UDP port 5060...
Cisco IOS SIP Packet Remote DoS (Bug ID CSCdz39284, CSCdz41124)
Binary data 2251.prm...
Cisco IOS SIP Packet DoS (Bug ID CSCdz39284, CSCdz41124)
Binary data 2250.prm...
GLSA-200406-01 : Ethereal: Multiple security problems
The remote host is affected by the vulnerability described in GLSA-200406-01 Ethereal: Multiple security problems There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.4, including: A buffer overflow in the MMSE dissector. Under specific conditions a SIP packet could make...
Fedora Core 2 : ethereal-0.10.3-2.1 (2004-153)
Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...
Fedora Core 1 : ethereal-0.10.3-0.1.1 (2004-152)
Issues have been discovered in the following protocol dissectors : - A SIP packet could make Ethereal crash under specific conditions, as described in the following message: http://www.ethereal.com/lists/ethereal-users/200405/msg0 0018.html 0.10.3. - The AIM dissector could throw an assertion,...