Unscored severity · published Feb 14, 2009
CVE-2008-6141
Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service (crash) via a large amount of H.323 data
–
CVSS
1.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to cause a denial of service (crash) via a large amount of H.323 data.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
IP Soft Phone · Avaya
6.0; 6.01.85 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-6141
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-6141
Vendor Advisory
http://secunia.com/advisories/32206
Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-363.htm
www.securityfocus.com
http://www.securityfocus.com/bid/31635
Vendor Advisory
http://www.voipshield.com/research-details.php?id=125
www.vupen.com
http://www.vupen.com/english/advisories/2008/2775
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/45745
More from IP Soft Phone
–
CVE-2007-3286
Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via…
–
CVE-2005-0506
The Avaya IP Office Phone Manager, and other products such as the IP Softphone, stores sensitive data in cleartext in a registry key, which allows local and possibly remote users…