Technical Description

A vulnerability has been identified in Nortel IP Softphone 2050, which could be exploited by remote attackers to cause a denial of service or potentially compromise a vulnerable device. This issue is caused by a buffer overflow error when processing specially crafted packets, which could be exploited by remote attackers to crash an affected application or potentially execute arbitrary code.

Affected Products

Nortel IP Softphone 2050

Solution

The vendor is still investigating this vulnerability.

VUPEN Security is not aware of any vendor-supplied patch.

References

http://www.vupen.com/english/advisories/2007/3540
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=655203
http://www.csnc.ch/static/advisory/csnc/nortel_UNIStim_IP_softphone_buffer-overflow_v1.0.txt

Credits

Vulnerability reported by Daniel Stirnimann and Cyrill Brunschwiler (Compass Security Network Computing).

ChangeLog

2007-10-19 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts with CVE, CWE, and CVSS when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.