high7.5Public exploit code
CVE-2007-5636
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Nortel Networks UNIStim IP SoftPhone 2050 - RTCP Port Buffer Overflow2007-10-18 · remote · multiple · Verified
Impact
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary code via a flood of invalid characters to the RTCP port (5678/udp) that triggers a Windows error message, aka "extraneous messaging."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nortel | Ip Softphone 2050 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/38521
- http://secunia.com/advisories/27252
- http://securityreason.com/securityalert/3271
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=655203
- http://www.csnc.ch/static/advisory/csnc/nortel_UNIStim_IP_softphone_buffer-overflow_v1.0.txt
- http://www.securityfocus.com/archive/1/482476/100/0/threaded
- http://www.securityfocus.com/bid/26118
- http://www.vupen.com/english/advisories/2007/3540
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37256
- http://osvdb.org/38521
- http://secunia.com/advisories/27252
- http://securityreason.com/securityalert/3271
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=655203
- http://www.csnc.ch/static/advisory/csnc/nortel_UNIStim_IP_softphone_buffer-overflow_v1.0.txt
- http://www.securityfocus.com/archive/1/482476/100/0/threaded
- http://www.securityfocus.com/bid/26118
- http://www.vupen.com/english/advisories/2007/3540
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37256