NVD

Id
54460  
Name
CVE-2007-2293  
Description
Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute arbitrary code via a long (1) T38FaxRateManagement or (2) T38FaxUdpEC SDP parameter in an SIP message, as demonstrated using SIP INVITE.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-04-26  
Modified Date
2011-03-07  
Seq
2007-2293  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276252 54460 CVE-2007-2293 2645  View
276253 54460 CVE-2007-2293 http://www.asterisk.org/files/ASA-2007-010.pdf  View
276254 54460 CVE-2007-2293 20070425 ASA-2007-010: Two stack buffer overflows in SIP channel"s T.38 SDP parsing code  View
276255 54460 CVE-2007-2293 20070704 Multiple Remote unauthenticated stack overflows in Asterisk chan_sip.c  View
276256 54460 CVE-2007-2293 23648  View
276257 54460 CVE-2007-2293 1017951  View
276258 54460 CVE-2007-2293 1018337  View
276259 54460 CVE-2007-2293 ADV-2007-1534  View
276260 54460 CVE-2007-2293 asterisk-processsdp-bo(33895)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53211 JVNDB-2007-001903 Asterisk の SIP チャネル T.38 SDP パーサの chan_sip.c の process_sdp 関数におけるスタックベースのバッファオーバーフローの脆弱性 Asterisk の SIP チャネル T.38 SDP パーサの chan_sip.c の process_sdp 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-2293 25648 CVE-2007-2293 54460 7.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001903.html 2007-04-26 2012-06-26 View