Vulnerability Description
Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nortel | Sip Softphone | 4.13.5.208 |
References
- http://osvdb.org/45429
- http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=297&
- http://osvdb.org/45429
- http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=297&
FAQ
What is CVE-2007-3438?
CVE-2007-3438 is a vulnerability with a CVSS score of 7.8 (HIGH). Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to execute arbitrary code via a malformed message, a different vul...
How severe is CVE-2007-3438?
CVE-2007-3438 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-3438?
Check the references section above for vendor advisories and patch information. Affected products include: Nortel Sip Softphone.