Code injection

The Asterisk Extension Language AEL in pbx/pbxael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form...

CVE-2007-1595

The Asterisk Extension Language AEL in pbx/pbxael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form...

CVE-2007-1595

The CVE-2007-1595 entry concerns the Asterisk Extension Language (AEL) in pbx/pbx_ael.c, where extensions are not properly generated. The flaw allows remote attackers to cause execution of arbitrary extensions by supplying an invalid extension in a specific form, with an unknown overall impact as...