CVE-2007-3441

Format string vulnerability in the Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to cause a denial of service blocked call reception and slow calling via format string specifiers in an SDP header value, a different vulnerability than CVE-2007-33...

CVE-2007-3441

CVE-2007-3441 affects the Aastra 9112i SIP Phone (firmware 1.4.0.1048, boot 1.1.0.10). The vulnerability is a format string flaw in an SDP header value that remote attackers can exploit to cause a denial of service (blocked call reception and slow calling). This entry is distinct from CVE-2007-33...

CVE-2007-3444

The CVE-2007-3444 entry concerns the Research in Motion BlackBerry 7270 with 4.0 SP1 Bundle 83. Affected component: the SIP processing path that handles INVITE messages. Root cause described as potential multiple format string specifiers in the From field, combined with a spoofed source IP and fu...

CVE-2007-3444

The Research in Motion BlackBerry 7270 with 4.0 SP1 Bundle 83 allows remote attackers to cause a denial of service blocked call reception via a malformed SIP invite message, possibly related to multiple format string specifiers in the From field, a spoofed source IP address, and limitations of th...

CVE-2007-3439

The CVE concerns the Snom 320 SIP Phone (snom320 linux 3.25, snom320-SIP 6.2.3, snom320 jffs23.36). The vulnerability allows remote attackers to read a list of missed calls, received calls, and dialed numbers via a direct request to the web server on port 1800. The root cause and exact exploitati...

CVE-2007-3439

The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36, allows remote attackers to read a list of missed calls, received calls, and dialed numbers via a direct request to the web server on port 1800...

BlackBerry 7270 Phone SIP堆栈格式串漏洞

BlackBerry 7270 Phone是一款IP电话解决方案。 BlackBerry 7270 Phone处理INVITE消息存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 由于存在格式串问题，提交包含恶意数据的SIP INVITE消息，可导致程序不能使用，必须重新启动获得正常功能。当漏洞被利用时，设备生成如下错误： "Uncaught exception: java.lang.IllegalArgumentException" BlackBerry Device Software 4.0.1 .83 BlackBerry 7270 0 可联系供应商获得补丁信息：...

CVE-2007-3347

The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID...

CVE-2007-3349

The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to 1 cause a denial of service device freeze via a malformed SIP message of a certain length or 2 cause a denial of service continuous ring via a malformed SIP message of a certain other length...

CVE-2007-3368

Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service device reboot via a malformed CGI parameter...

Design/Logic Flaw

The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...

Design/Logic Flaw

The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service device outage via a malformed SDP header in a SIP INVITE message...

Buffer overflow

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service device hang or reboot via an INVITE message with a long Via header...

Design/Logic Flaw

The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID...

CVE-2007-3362

ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to 1 cause a denial of service call disruption and device hang via a SIP message with a malformed header and 2 cause a denial of service call disruption, false ring indication, and...

Design/Logic Flaw

AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application hang via a flood of spoofed SIP INVITE requests...

Design/Logic Flaw

ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to 1 cause a denial of service call disruption and device hang via a SIP message with a malformed header and 2 cause a denial of service call disruption, false ring indication, and...

CVE-2007-3363

Multiple unspecified vulnerabilities in ageet AGEphone before 1.6.3 allow remote attackers to have an unknown impact via malformed SIP packets...

Code injection

Multiple unspecified vulnerabilities in ageet AGEphone before 1.6.3 allow remote attackers to have an unknown impact via malformed SIP packets...

Buffer overflow

Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service device reboot via a malformed CGI parameter...