CVE-2007-3438

Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2007-06-27

Last modified

2024-08-07

Affected products

• Sip Softphone (Nortel)

References

• http://osvdb.org/45429
• http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=297&