CVE-2005-4466

Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a REGISTER request with a SPI version number that contains a large number of space or tab characters.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-12-22

Last modified

2024-08-07

Affected products

• Interaction Sip Proxy (Interactive Intelligence)

References

• http://secunia.com/advisories/18197
• http://securityreason.com/securityalert/281
• http://securitytracker.com/id?1015392
• http://www.hat-squad.com/en/000171.html
• http://www.securityfocus.com/archive/1/419989/100/0/threaded
• http://www.securityfocus.com/bid/16001
• http://www.vupen.com/english/advisories/2005/3029
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23823