PT-2007-4707 · Microsoft · Msn Messenger+1

Publicado 2007-06-27 · Atualizado 2017-07-29 · CVE-2007-3436

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft MSN Messenger version 4.7 on Windows XP

Description The issue allows remote attackers to cause a denial of service through resource consumption by sending a flood of SIP INVITE requests to the port specified for voice conversation.

Recommendations For Microsoft MSN Messenger version 4.7 on Windows XP, consider restricting access to the voice conversation port to minimize the risk of exploitation. As a temporary workaround, limiting the number of incoming SIP INVITE requests may help mitigate the issue until a more permanent solution is available.

Correção

Identificadores relacionados

CVE-2007-3436

Produtos afetados

Msn Messenger

Windows Xp

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-3436 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35064 · Nota
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=292& · Nota
• http://osvdb.org/45427 · Nota