PT-2007-4709 · Nortel · Nortel Pc Client Sip Soft Phone

Published 2007-06-27 · Updated 2008-11-15 · CVE-2007-3438

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Nortel PC Client SIP Soft Phone version 4.1 3.5.208

Description A buffer overflow issue exists in the SIP header parsing module, allowing remote attackers to execute arbitrary code via a malformed message.

Recommendations For Nortel PC Client SIP Soft Phone version 4.1 3.5.208, consider disabling the SIP header parsing module until a patch is available. Restrict access to the module to minimize the risk of exploitation. Avoid using the affected module in the SIP Soft Phone until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-3438

Affected Products

Nortel Pc Client Sip Soft Phone

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2007-3438 · Security Note
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=297& · Note
• http://osvdb.org/45429 · Note