CVE-2008-0531

Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message.

Score

CVSS 2.0 9.3 Critical

Status

Modified - psirt@cisco.com

Published

2008-02-15

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Session Initiation Protocol (sip) Firmware (Cisco)
• Skinny Client Control Protocol (sccp) Firmware (Cisco)

References

• http://secunia.com/advisories/28935
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml
• http://www.securityfocus.com/bid/27774
• http://www.securitytracker.com/id?1019411
• http://www.vupen.com/english/advisories/2008/0543
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40498