PT-2007-4639 · Agephone · Agephone

Published 2007-06-22 · Updated 2017-07-29 · CVE-2007-3362

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions AGEphone versions prior to 1.6.2

Description The issue allows remote attackers to cause a denial of service, resulting in call disruption and device hang, via a SIP message with a malformed header. Additionally, it can cause a denial of service, leading to call disruption, false ring indication, and device outage, via a SIP message with a malformed SDP delimiter.

Recommendations For versions prior to 1.6.2, update to version 1.6.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-3362

Affected Products

Agephone

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-3362 · Security Note
• http://osvdb.org/37729 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35067 · Note
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=215& · Note
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=214& · Note
• http://securityfocus.com/bid/24543 · Note
• http://securityfocus.com/bid/24540 · Note
• http://ageet.com/us/agephone/help/index.htm#vers · Note
• http://secunia.com/advisories/25781 · Note