PT-2007-4714 · Research In Motion · Blackberry 7270

Published 2007-06-27 · Updated 2017-07-29 · CVE-2007-3443

Positive Technologies (AI Summary)

CVSS v2.0

2.3

Low

Base vector

AV:A/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Research in Motion BlackBerry 7270 versions prior to 4.0 SP1 Bundle 108

Description The issue allows remote attackers to cause a denial of service, resulting in a temporary device hang, by sending a certain SIP INVITE message without providing an ACK when the call is answered. This occurs due to improper management of transaction states.

Recommendations For versions prior to 4.0 SP1 Bundle 108, update to 4.0 SP1 Bundle 108 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-3443

Affected Products

Blackberry 7270

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-3443 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35075 · Note
• http://osvdb.org/37647 · Note
• http://secunia.com/advisories/25824 · Note
• http://kb.cert.org/vuls/id/324841 · Note
• http://sipera.com/index.php?action=resources%2Cthreat_advisory&tid=213& · Note
• http://securityfocus.com/bid/24545 · Note
• http://blackberry.com/btsc/articles/220/KB12705_f.SAL_Public.html · Note