4501 matches found
Code injection
The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...
Code injection
The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to 1 cause a denial of service device freeze via a malformed SIP message of a certain length or 2 cause a denial of service continuous ring via a malformed SIP message of a certain other length...
CVE-2007-3350
AOL Instant Messenger AIM 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service application hang via a flood of spoofed SIP INVITE requests...
CVE-2007-3361
The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...
CVE-2007-3369
Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service device hang or reboot via an INVITE message with a long Via header...
CVE-2007-3351
The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...
CVE-2007-3348
The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service device outage via a malformed SDP header in a SIP INVITE message...
CVE-2007-3348
The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service device outage via a malformed SDP header in a SIP INVITE message...
CVE-2007-3369
CVE-2007-3369 concerns the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067. A buffer overflow in this combination can be triggered by an INVITE message with a long Via header, allowing a remote attacker to cause a denial of service (device hang or reboot). The N...
CVE-2007-3368
Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service device reboot via a malformed CGI parameter...
CVE-2007-3363
AGEphone prior to 1.6.3 is affected by CVE-2007-3363, described as multiple unspecified vulnerabilities that allow a remote attacker to impact the system via malformed SIP packets. The CVSS metrics indicate a high-severity, network-based issue with no authentication required and complete impact o...
CVE-2007-3349
The CVE-2007-3349 entry concerns the Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10. The advisory states two remote denial of service outcomes triggered by malformed SIP messages of specific lengths: (1) device freeze and (2) continuous ring. No additional technical det...
CVE-2007-3351
The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service device hang and traffic amplification via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets...
CVE-2007-3349
The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to 1 cause a denial of service device freeze via a malformed SIP message of a certain length or 2 cause a denial of service continuous ring via a malformed SIP message of a certain other length...
CVE-2007-3361
The Nortel PC Client SIP Soft Phone 4.1 3.5.20820051015 allows remote attackers to cause a denial of service device crash via a SIP message with a malformed header...
CVE-2007-3351
CVE-2007-3351 affects SJPhone SIP soft phone 1.60.303c running on Dell Axim X3 with Windows Mobile 2003. A direct crafted INVITE can cause the device to transmit many RTP packets, resulting in a denial of service (device hang). No remediation or exploit details are provided in the supplied docume...
CVE-2007-3348
The CVE-2007-3348 entry concerns D-Link DPH-540/DPH-541 phones. Affected component: the SIP handling code where a malformed SDP header in a SIP INVITE can be used by remote attackers to trigger a device denial of service. This is described in NVD/CVE records with a CVSS v2 base score of 7.8 (HIGH...
CVE-2007-3347
The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers to engage in arbitrary SIP communication with the phone, as demonstrated by communication with forged caller ID...