CVE

Id
27119  
CVE No.
CVE-2007-3762  
Status
Candidate  
Description
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame.  
Phase
Assigned (20070713)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277546 27119 CVE-2007-3762 CONFIRM:http://ftp.digium.com/pub/asa/ASA-2007-014.pdf  View
277547 27119 CVE-2007-3762 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=185713  View
277548 27119 CVE-2007-3762 DEBIAN:DSA-1358  View
277549 27119 CVE-2007-3762 URL:http://www.debian.org/security/2007/dsa-1358  View
277550 27119 CVE-2007-3762 GENTOO:GLSA-200802-11  View
277551 27119 CVE-2007-3762 URL:http://security.gentoo.org/glsa/glsa-200802-11.xml  View
277552 27119 CVE-2007-3762 SUSE:SUSE-SR:2007:015  View
277553 27119 CVE-2007-3762 URL:http://www.novell.com/linux/security/advisories/2007_15_sr.html  View
277554 27119 CVE-2007-3762 BID:24949  View
277555 27119 CVE-2007-3762 URL:http://www.securityfocus.com/bid/24949  View
277556 27119 CVE-2007-3762 VUPEN:ADV-2007-2563  View
277557 27119 CVE-2007-3762 URL:http://www.vupen.com/english/advisories/2007/2563  View
277558 27119 CVE-2007-3762 SECTRACK:1018407  View
277559 27119 CVE-2007-3762 URL:http://www.securitytracker.com/id?1018407  View
277560 27119 CVE-2007-3762 SECUNIA:26099  View
277561 27119 CVE-2007-3762 URL:http://secunia.com/advisories/26099  View
277562 27119 CVE-2007-3762 SECUNIA:29051  View
277563 27119 CVE-2007-3762 URL:http://secunia.com/advisories/29051  View
277564 27119 CVE-2007-3762 XF:asterisk-iax2channeldriver-bo(35466)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53651 JVNDB-2007-002343 Asterisk の Skinny チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 Asterisk、Business Edition、AsteriskNOW、Appliance Developer Kit および s800i の Skinny チャネルドライバ (chan_skinny) には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2007-3764 27119 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002343.html  View