DEBIAN-CVE-2009-2651

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

CVE-2009-2651

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

CVE-2009-2651

CVE-2009-2651 affects Asterisk Open Source 1.6.1 up to, but not including, 1.6.1.2. A remote attacker can trigger a Denial of Service by sending an RTP text frame without a required delimiter, causing a NULL pointer dereference and an invalid pointer calculation. The issue is mitigated by upgradi...

CVE-2009-2651

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

CVE-2009-2651

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

CVE-2008-4444

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

Code injection

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

CVE-2008-4444

CVE-2008-4444 — Cisco SIP phones RTP header parsing DoS/risk of code execution Affected hardware/software: Cisco Unified IP Phone models 7960G and 7940G with firmware P0S3-08-9-00 and possibly earlier versions up to 8.10. Vulnerability: Improper parsing of certain RTP headers can be exploited by ...

CVE-2008-4444

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

Cisco SIP VoIP phones DoS

Crash on malformed RTP header parsing...

Cisco Unified IP Phone 7960G and 7940G (SIP) RTP Header Vulnerability

Title: ------ Cisco Unified IP Phone 7960G and 7940G SIP RTP Header Vulnerability Summary: -------- The Cisco Unified IP Phone 7960G and 7940G SIP do not correctly parse some malformed RTP headers leading to a deterministic denial of service Assigned CVE: ------------- CVE-2008-4444 Details:...

Cisco Unified IP Phone 7960G and 7940G RTP远程拒绝服务漏洞

BUGTRAQ ID: 33264 CVE ID：CVE-2008-4444 CNCVE ID：CNCVE-20084444 Cisco Unified IP Phone是思科的统一IP电话解决方案。 Cisco Unified IP Phone 7960G和7940G不正确解析部分畸形RTP头字段数据，远程攻击者可以利用漏洞对电话机进行拒绝服务攻击。 SIP协议用于在电话中设置呼叫，一旦呼叫建立，媒体内容由RTP协议承接，远程攻击者可以发送特殊构建的RTP报文时电话重启。 Cisco Unified IP Phone 7960G Cisco Unified IP Phone 7940G...

FreeBSD Ports: ethereal, ethereal-lite, tethereal, tethereal-lite

The remote host is missing an update to the system as announced in the referenced advisory. VID efa1344b-5477-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

AOL AIM SIPFoundry sipXtapi RTP Processing Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of any communication application utilizing the SIP Foundry API. This includes vendors such as AOL, Yahoo, Skype, Oracle, Nortel and more. Authentication is not required to exploit these vulnerabilitie...

Update Protection against Asterisk Buffer Overflow Vulnerabilities

Two buffer overflow vulnerabilities have been reported in the RTP payload handling code of Asterisk that could allow remote attackers to execute arbitrary code...

CVE-2008-1289

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

Buffer overflow

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

CVE-2008-1289

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

CVE-2008-1289

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...

CVE-2008-1289

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...