NVD

Id
1248  
Name
CVE-2008-1289  
Description
Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a zero to an arbitrary memory location via a large RTP payload number, related to the ast_rtp_unset_m_type function in main/rtp.c; or (2) write certain integers to an arbitrary memory location via a large number of RTP payloads, related to the process_sdp function in channels/chan_sip.c.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-03-24  
Modified Date
2011-03-07  
Seq
2008-1289  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7907 1248 CVE-2008-1289 http://downloads.digium.com/pub/security/AST-2008-002.html  View
7908 1248 CVE-2008-1289 http://labs.musecurity.com/advisories/MU-200803-01.txt  View
7909 1248 CVE-2008-1289 3763  View
7910 1248 CVE-2008-1289 1019628  View
7911 1248 CVE-2008-1289 http://www.asterisk.org/node/48466  View
7912 1248 CVE-2008-1289 20080318 AST-2008-002: Two buffer overflows in RTP Codec Payload Handling  View
7913 1248 CVE-2008-1289 28308  View
7914 1248 CVE-2008-1289 ADV-2008-0928  View
7915 1248 CVE-2008-1289 asterisk-rtppayload-bo(41302)  View
7916 1248 CVE-2008-1289 asterisk-rtp-codecpayload-bo(41305)  View
7917 1248 CVE-2008-1289 FEDORA-2008-2554  View
7918 1248 CVE-2008-1289 FEDORA-2008-2620  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47524 JVNDB-2008-002834 Asterisk Open Source におけるバッファオーバーフローの脆弱性 Asterisk Open Source、Open Source、Business Edition、AsteriskNOW、Appliance Developer Kit および s800i には、バッファオーバーフローの脆弱性が存在します。 CVE-2008-1289 31402 CVE-2008-1289 1248 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002834.html 2008-03-18 2012-06-26 View