PT-2008-6324 · Microsoft · Ge Communicator+1

Praveen Darshanam · Published 2008-11-20 · Updated 2024-10-15 · CVE-2008-5180

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Microsoft Communicator (affected versions not specified) Microsoft Office 2010 beta (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption, via a large number of SIP INVITE requests. This triggers the creation of many sessions.

Recommendations For Microsoft Communicator, consider restricting the number of incoming SIP INVITE requests to prevent excessive session creation until a fix is available. For Microsoft Office 2010 beta, restrict access to the Communicator component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2008-5180

Affected Products

Ge Communicator

Office 2010

References · 12

• 🔥 https://exploit-db.com/exploits/12079 · Exploit
• 🔥 https://exploit-db.com/exploits/7262 · Exploit
• 🔥 http://exploit-db.com/exploits/12079 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5180 · Security Note
• https://t.me/cvenotify/98102 · Telegram Post
• http://secunia.com/advisories/32940 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46673 · Note
• http://voipshield.com/research-details.php?id=133 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57581 · Note
• https://t.me/cvenotify/69696 · Telegram Post
• http://securityfocus.com/bid/39221 · Note
• http://securitytracker.com/id?1021294 · Note