PT-2007-4713 · Research In Motion · Blackberry 7270

Publicado 2007-06-27 · Atualizado 2017-07-29 · CVE-2007-3442

Positive Technologies (AI Summary)

CVSS v2.0

2.3

Baixa

Vetor base

AV:A/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Research in Motion BlackBerry 7270 versions prior to 4.0 SP1 Bundle 108

Description The issue allows remote attackers to cause a denial of service, resulting in blocked call reception and calling, by utilizing format string specifiers in an SIP INVITE message that lacks a host name in the Contact header.

Recommendations For versions prior to 4.0 SP1 Bundle 108, update to version 4.0 SP1 Bundle 108 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-3442

Produtos afetados

Blackberry 7270

Referências · 7

• http://blackberry.com/btsc/articles/218/KB12707_f.SAL_Public.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35077 · Nota
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=208& · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3442 · Nota de Segurança
• http://secunia.com/advisories/25824 · Nota
• http://osvdb.org/37646 · Nota
• http://kb.cert.org/vuls/id/619465 · Nota