PT-2007-4712 · Aastra · Aastra 9112I Sip Phone

Publicado 2007-06-27 · Atualizado 2017-07-29 · CVE-2007-3441

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Aastra 9112i SIP Phone version 1.4.0.1048

Description The issue allows remote attackers to cause a denial of service, resulting in blocked call reception and slow calling, via format string specifiers in an SDP header value.

Recommendations For version 1.4.0.1048, consider restricting access to the SDP header to minimize the risk of exploitation until a patch is available.

Correção

Identificadores relacionados

CVE-2007-3441

Produtos afetados

Aastra 9112I Sip Phone

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-3441 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35079 · Nota
• http://osvdb.org/45403 · Nota
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=278& · Nota