PT-2007-4712 · Aastra · Aastra 9112I Sip Phone

Published 2007-06-27 · Updated 2017-07-29 · CVE-2007-3441

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Aastra 9112i SIP Phone version 1.4.0.1048

Description The issue allows remote attackers to cause a denial of service, resulting in blocked call reception and slow calling, via format string specifiers in an SDP header value.

Recommendations For version 1.4.0.1048, consider restricting access to the SDP header to minimize the risk of exploitation until a patch is available.

Fix

Related Identifiers

CVE-2007-3441

Affected Products

Aastra 9112I Sip Phone

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-3441 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35079 · Note
• http://osvdb.org/45403 · Note
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=278& · Note