Cross site request forgery (csrf)

eStara SIP softphone allows remote attackers to cause a denial of service crash via an INVITE request with a Content-Length field that has more than 9 digits...

CVE-2006-0738

Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service hang via SIP INVITE requests with format string specifiers in the SDP session description, as demonstrated using 1 the field name, 2 the o field owner/creator and session identifier,...

Format string

Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service hang via SIP INVITE requests with format string specifiers in the SDP session description, as demonstrated using 1 the field name, 2 the o field owner/creator and session identifier,...

Design/Logic Flaw

eStara SIP softphone allows remote attackers to cause a denial of service crash via a SIP OPTIONS request with a negative Expires field...

CVE-2006-0737

eStara SIP softphone allows remote attackers to cause a denial of service crash via a SIP OPTIONS request with a negative Expires field...

CVE-2006-0738

CVE-2006-0738 concerns the eStara SIP softphone. The vulnerability arises from multiple format string vulnerabilities in how the SDP session description is processed during SIP INVITE handling, allowing remote attackers to cause a denial of service (hang). Affected component details state that fo...

CVE-2006-0737

The CVE describes a vulnerability in the eStara SIP softphone where remote attackers can crash the client by sending a SIP OPTIONS request with a negative Expires field. The issue is triggered by handling of invalid Expires values in SIP OPTIONS, leading to a denial of service. The available refe...

CVE-2006-0739

The CVE-2006-0739 entry refers to the eStara SIP softphone as the affected product. The vulnerability allows a remote attacker to cause a denial of service (crash) by sending an INVITE request where the Content-Length field contains more than 9 digits. No exploit details or remediation are provid...

CVE-2006-0739

eStara SIP softphone allows remote attackers to cause a denial of service crash via an INVITE request with a Content-Length field that has more than 9 digits...

CVE-2006-0738

Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service hang via SIP INVITE requests with format string specifiers in the SDP session description, as demonstrated using 1 the field name, 2 the o field owner/creator and session identifier,...

CVE-2006-0737

eStara SIP softphone allows remote attackers to cause a denial of service crash via a SIP OPTIONS request with a negative Expires field...

eStara Softphone SIP VoIP phone buffer overflow

Buffer overflow on oversized SIP packet attribute field. Integer overflows and format string bugs...

eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service

eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to...

eStara SoftPhone 3.0.1 SIP Packet - Multiple Malformed Field Denial of Service Vulnerabilities

eStara SoftPhone 3.0.1 SIP Packet - Multiple Malformed Field Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause t...

eStara SoftPhone 3.0.1 SIP Packet - Multiple Malformed Field Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. For the negative 'Expires' field issue: OPTIONS sip:[email protected] SIP/2.0 Via...

eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String Denial of Service

source: https://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. INVITE sip:[email protected] SIP/2.0 Via: SIP/2.0/UDP...

CVE-2006-0359

Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to 1 cause a denial of service device crash via SIP INVITE commands with a long header field name sent during startup and 2 cause a denial of service device hang or crash via SIP INVITE commands with a long header field...

Buffer overflow

Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to 1 cause a denial of service device crash via SIP INVITE commands with a long header field name sent during startup and 2 cause a denial of service device hang or crash via SIP INVITE commands with a long header field...

CVE-2006-0359

CVE-2006-0359 affects CounterPath eyeBeam SIP Softphone. The vulnerability is a buffer overflow in the SIP stack that allows remote attackers to cause a denial of service either at startup or during a call by sending SIP INVITE requests with a long header field name. The connected sources corrobo...

CVE-2006-0359

Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to 1 cause a denial of service device crash via SIP INVITE commands with a long header field name sent during startup and 2 cause a denial of service device hang or crash via SIP INVITE commands with a long header field...