PT-2007-4709 · Nortel · Nortel Pc Client Sip Soft Phone

Publicado 2007-06-27 · Atualizado 2008-11-15 · CVE-2007-3438

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Nortel PC Client SIP Soft Phone version 4.1 3.5.208

Description A buffer overflow issue exists in the SIP header parsing module, allowing remote attackers to execute arbitrary code via a malformed message.

Recommendations For Nortel PC Client SIP Soft Phone version 4.1 3.5.208, consider disabling the SIP header parsing module until a patch is available. Restrict access to the module to minimize the risk of exploitation. Avoid using the affected module in the SIP Soft Phone until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-3438

Produtos afetados

Nortel Pc Client Sip Soft Phone

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2007-3438 · Nota de Segurança
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=297& · Nota
• http://osvdb.org/45429 · Nota