Login Request a demo
Unscored severity · published Oct 23, 2007
CVE-2007-5636
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary code via a flood of…
–
CVSS
6.7%
EPSS
No
On KEV
Description
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary code via a flood of invalid characters to the RTCP port (5678/udp) that triggers a Windows error message, aka "extraneous messaging."
Exploitation
Is it being used?
Exploit prediction (EPSS)6.7% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
IP Softphone 2050 · Nortel
All versions, or not specified · source: NVD
Affected product
IS
IP Softphone 2050
Nortel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5636
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5636
osvdb.org
http://osvdb.org/38521
Vendor Advisory
http://secunia.com/advisories/27252
securityreason.com
http://securityreason.com/securityalert/3271
support.nortel.com
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=655203
Exploit
http://www.csnc.ch/static/advisory/csnc/nortel_UNIStim_IP_softphone_buffer-overflow_v1.0.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/482476/100/0/threaded
More from IP Softphone 2050
–
CVE-2007-5639
The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of…
–
CVE-2004-1305
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service…
–
CVE-2004-1319
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is…
–
CVE-2004-0839
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and…