PT-2008-6324 · Microsoft · Ge Communicator+1

Praveen Darshanam · Publicado 2008-11-20 · Atualizado 2024-10-15 · CVE-2008-5180

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Microsoft Communicator (affected versions not specified) Microsoft Office 2010 beta (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption, via a large number of SIP INVITE requests. This triggers the creation of many sessions.

Recommendations For Microsoft Communicator, consider restricting the number of incoming SIP INVITE requests to prevent excessive session creation until a fix is available. For Microsoft Office 2010 beta, restrict access to the Communicator component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Enumeração de Fraquezas

CWE-770

Identificadores relacionados

CVE-2008-5180

Produtos afetados

Ge Communicator

Office 2010

Referências · 12

• 🔥 https://exploit-db.com/exploits/12079 · Exploit
• 🔥 https://exploit-db.com/exploits/7262 · Exploit
• 🔥 http://exploit-db.com/exploits/12079 · Exploit
• https://t.me/cvenotify/98102 · Publicação no Telegram
• http://secunia.com/advisories/32940 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46673 · Nota
• http://voipshield.com/research-details.php?id=133 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57581 · Nota
• https://t.me/cvenotify/69696 · Publicação no Telegram
• http://securityfocus.com/bid/39221 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5180 · Nota de Segurança
• http://securitytracker.com/id?1021294 · Nota