EUVD-2015-4249

Malware in sbrugna...

Code injection

The packet-storing feature on Cisco 9900 phones with firmware 9.32 does not properly support the RTP protocol, which allows remote attackers to cause a denial of service device hang by sending malformed RTP packets after a call is answered, aka Bug ID CSCur39976...

CVE-2015-4226

Cisco 9900 Series IP Phones (firmware 9.3(2)) contain a DoS vulnerability in the packet-storing feature due to improper RTP handling. An unauthenticated remote attacker can cause a device hang by sending malformed RTP packets after a call is answered. Impact is DoS with a network attack vector; r...