PT-2007-4713 · Research In Motion · Blackberry 7270

Published 2007-06-27 · Updated 2017-07-29 · CVE-2007-3442

Positive Technologies (AI Summary)

CVSS v2.0

2.3

Low

Base vector

AV:A/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Research in Motion BlackBerry 7270 versions prior to 4.0 SP1 Bundle 108

Description The issue allows remote attackers to cause a denial of service, resulting in blocked call reception and calling, by utilizing format string specifiers in an SIP INVITE message that lacks a host name in the Contact header.

Recommendations For versions prior to 4.0 SP1 Bundle 108, update to version 4.0 SP1 Bundle 108 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-3442

Affected Products

Blackberry 7270

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-3442 · Security Note
• http://blackberry.com/btsc/articles/218/KB12707_f.SAL_Public.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35077 · Note
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=208& · Note
• http://secunia.com/advisories/25824 · Note
• http://osvdb.org/37646 · Note
• http://kb.cert.org/vuls/id/619465 · Note