NVD

Id
61583  
Name
CVE-2006-2898  
Description
The IAX2 channel driver (chan_iax2) for Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via truncated IAX 2 (IAX2) video frames, which bypasses a length check and leads to a buffer overflow involving negative length check. NOTE: the vendor advisory claims that only a DoS is possible, but the original researcher is reliable.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-06-07  
Modified Date
2011-03-07  
Seq
2006-2898  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
318566 61583 CVE-2006-2898 1016236  View
318567 61583 CVE-2006-2898 http://www.asterisk.org/node/95  View
318568 61583 CVE-2006-2898 DSA-1126  View
318569 61583 CVE-2006-2898 GLSA-200606-15  View
318570 61583 CVE-2006-2898 SUSE-SR:2006:015  View
318571 61583 CVE-2006-2898 20060606 Asterisk 1.2.9 and Asterisk 1.0.11 Released - Security Fix  View
318572 61583 CVE-2006-2898 20060609 CORE-2006-0330: Asterisk PBX truncated video frame vulnerability  View
318573 61583 CVE-2006-2898 18295  View
318574 61583 CVE-2006-2898 ADV-2006-2181  View
318575 61583 CVE-2006-2898 asterisk-iax2-videoframe-bo(27045)  View

Related JVN