Unscored severity · published Sep 19, 2007
CVE-2007-3286
Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via…
–
CVSS
2.5%
EPSS
No
On KEV
Description
Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
IP Soft Phone · Avaya
through 5.2; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3286
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3286
osvdb.org
http://osvdb.org/38258
support.avaya.com
http://support.avaya.com/elmodocs2/security/ASA-2007-314.htm
www.securityfocus.com
http://www.securityfocus.com/bid/25707
More from IP Soft Phone
–
CVE-2008-6141
Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service (crash) via a large amount of H.323 data
–
CVE-2005-0506
The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users…