CVE-2007-5636 Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary code via a flood of invalid characters t...
HighCVSS 7.5
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary code via a flood of invalid characters to the RTCP port (5678/udp) that triggers a Windows error message, aka "extraneous messaging."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nortel ip softphone 2050 | All versions | No fix listed |
References
- 38521 vdb-entry
- 27252 third-party-advisory vendor-advisory
- 3271 third-party-advisory
- support.nortel.com
- www.csnc.ch exploit
- 20071018 Nortel UNIStim IP Softphone Buffer-Overflow mailing-list
- 26118 exploit vdb-entry
- ADV-2007-3540 vdb-entry
- nortel-ipsoftphone-rtcp-bo(37256) vdb-entry