Description
eStara SIP softphone allows remote attackers to cause a denial of service (crash) via an INVITE request with a Content-Length field that has more than 9 digits.
References
- 18872 third-party-advisory
- ADV-2006-0607 vdb-entry
- 16629 vdb-entry
- estara-content-length-dos(24679) vdb-entry
- 20060214 eStara SIP softphone several message-processing vulnerabilities mailing-list