medium5.0Public exploit code
CVE-2009-3704
ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service (crash) via a SIP INVITE request with a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ZoIPer 2.22 - Call-Info Remote Denial of Service2009-10-14 · dos · multiple · Verified
Impact
ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service (crash) via a SIP INVITE request with an empty Call-Info header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zoiper | Zoiper | through 2.22 Versions 2.0, 2.10, 2.11 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/0910-exploits/zoiper_dos.py.txt
- http://secunia.com/advisories/37015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53792
- http://packetstormsecurity.org/0910-exploits/zoiper_dos.py.txt
- http://secunia.com/advisories/37015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/53792