CVE-2009-3704

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service (crash) via a SIP INVITE request with an empty Call-Info header.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-10-16

Last modified

2024-08-07

Affected products

• Zoiper (Zoiper)

References

• http://packetstormsecurity.org/0910-exploits/zoiper_dos.py.txt
• http://secunia.com/advisories/37015
• https://exchange.xforce.ibmcloud.com/vulnerabilities/53792