CVE-2006-0359 Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device crash) via SIP INVITE commands with a long header field name sent during startup a...
HighCVSS 7.5
EPSS 4.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in CounterPath eyeBeam SIP Softphone allows remote attackers to (1) cause a denial of service (device crash) via SIP INVITE commands with a long header field name sent during startup and (2) cause a denial of service (device hang or crash) via SIP INVITE commands with a long header field name sent during a call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| counterpath eyebeam sip softphone | All versions | No fix listed |
References
- blog.donews.com
- 18516 third-party-advisory vendor-advisory
- 354 third-party-advisory
- 20060116 CounterPath eyeBeam Handing SIP header Vulnerabilities mailing-list
- 20060921 Re: CounterPath eyeBeam Handing SIP header Vulnerabilities mailing-list
- 16253 vdb-entry
- ADV-2006-0259 vdb-entry
- eyebeam-sip-header-bo(24181) vdb-entry