PT-2007-4714 · Research In Motion · Blackberry 7270

Publicado 2007-06-27 · Atualizado 2017-07-29 · CVE-2007-3443

Positive Technologies (AI Summary)

CVSS v2.0

2.3

Baixa

Vetor base

AV:A/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Research in Motion BlackBerry 7270 versions prior to 4.0 SP1 Bundle 108

Description The issue allows remote attackers to cause a denial of service, resulting in a temporary device hang, by sending a certain SIP INVITE message without providing an ACK when the call is answered. This occurs due to improper management of transaction states.

Recommendations For versions prior to 4.0 SP1 Bundle 108, update to 4.0 SP1 Bundle 108 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-3443

Produtos afetados

Blackberry 7270

Referências · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/35075 · Nota
• http://osvdb.org/37647 · Nota
• http://secunia.com/advisories/25824 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3443 · Nota de Segurança
• http://kb.cert.org/vuls/id/324841 · Nota
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=213& · Nota
• http://securityfocus.com/bid/24545 · Nota
• http://blackberry.com/btsc/articles/220/KB12705_f.SAL_Public.html · Nota