Asterisk RTP Comfort Noise Processing Remote Denial of Service Vulnerability (AST-2009-010)

Asterisk is prone to a remote denial-of-service vulnerability because it fails to properly handle malformed RTP comfort noise data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

AST-2009-010: RTP Remote Crash Vulnerability

Asterisk Project Security Advisory - AST-2009-010 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | RTP Remote Crash Vulnerability |...

AOL AIM sipXtapi.dll多个堆溢出漏洞

BUGTRAQ ID: 36849 AOL Instant Messenger是一款在线即时聊天工具。 AIM的SIP协议实现库（sipXtapi.dll）在解析RTCP发送方报告报文和RTP头时存在堆溢出漏洞。如果攻击者诱骗用户接受了视频聊天会话并向客户端发送了设置有畸形Extension Length值的RTP头或发送了恶意报文的话，就可以触发这些溢出，导致在客户端机器上执行任意指令。 AOL Instant Messenger 6.8 厂商补丁： AOL --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Asterisk RTP Text Frames DoS Vulnerability (AST-2009-004)

Asterisk is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...

Asterisk DoS

Crash on RTP text frames processing...

AST-2009-004: Remote Crash Vulnerability in RTP stack

Asterisk Project Security Advisory - AST-2009-004 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Remote Crash Vulnerability in RTP stack |...

CVE-2009-2651

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

CVE-2009-2651

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

Null pointer dereference

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

DEBIAN-CVE-2009-2651

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

CVE-2009-2651

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

CVE-2009-2651

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

CVE-2009-2651

CVE-2009-2651 affects Asterisk Open Source 1.6.1 up to, but not including, 1.6.1.2. A remote attacker can trigger a Denial of Service by sending an RTP text frame without a required delimiter, causing a NULL pointer dereference and an invalid pointer calculation. The issue is mitigated by upgradi...

CVE-2009-2651

main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service crash via an RTP text frame without a certain delimiter, which triggers a NULL pointer dereference and the subsequent calculation of an invalid pointer...

CVE-2008-4444

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

Code injection

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

CVE-2008-4444

CVE-2008-4444 — Cisco SIP phones RTP header parsing DoS/risk of code execution Affected hardware/software: Cisco Unified IP Phone models 7960G and 7940G with firmware P0S3-08-9-00 and possibly earlier versions up to 8.10. Vulnerability: Improper parsing of certain RTP headers can be exploited by ...

CVE-2008-4444

Cisco Unified IP Phone aka SIP phone 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service device reboot or possibly execute arbitrary code via a Realtime Transport Protocol RTP packet with malformed headers...

Cisco SIP VoIP phones DoS

Crash on malformed RTP header parsing...

Cisco Unified IP Phone 7960G and 7940G (SIP) RTP Header Vulnerability

Title: ------ Cisco Unified IP Phone 7960G and 7940G SIP RTP Header Vulnerability Summary: -------- The Cisco Unified IP Phone 7960G and 7940G SIP do not correctly parse some malformed RTP headers leading to a deterministic denial of service Assigned CVE: ------------- CVE-2008-4444 Details:...