Description
Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message.
References
- cisco-unifiedipphone-sipproxy-bo(40498) vdb-entry
- 20080213 Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities vendor-advisory
- 1019411 vdb-entry
- 27774 vdb-entry
- ADV-2008-0543 vdb-entry
- 28935 third-party-advisory