CVE-2006-0189 Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka "a") field in the SDP data of a SIP packet on UDP port 5060.
HighCVSS 7.5
EPSS 15.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a long attribute (aka "a") field in the SDP data of a SIP packet on UDP port 5060.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| estara softphone | = 3.0.1.14 | No fix listed |
| estara softphone | = 3.0.1.46 | No fix listed |
References
- 18410 third-party-advisory
- 1015481 vdb-entry
- 22348 vdb-entry
- 20060111 eStara Softphone SIP stack Buffer Overflow Vulnerability mailing-list
- 16213 exploit vdb-entry
- ADV-2006-0167 vdb-entry
- estara-sip-sdp-bo(24090) vdb-entry