CVE-2004-1940

KPhone’s sipclient.cpp (versions 4.0.1 and earlier) is affected by a vulnerability where a STUN response with a large attrLen value triggers an out-of-bounds read, leading to remote denial of service (crash). The issue is disclosed across CVE-2004-1940 entries (NVD, CVE list, PT-2004-2837), consi...

CVE-2004-1940

sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service crash via a STUN response packet with a large attrLen value that causes an out-of-bounds read...