First published: Fri Jun 22 2007(Updated: )
The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service (device hang and traffic amplification) via a direct crafted INVITE transaction, which causes the phone to transmit many RTP packets.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Windows 10 for Mobile | =2003 | |
Dell Axim X3 | ||
SJ Labs SJphone | =1.60.303c |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-3351 is categorized as a denial of service vulnerability, which allows attackers to hang the device and amplify traffic.
To mitigate CVE-2007-3351, consider updating or uninstalling the SJPhone software, as there are no specific patches available.
CVE-2007-3351 specifically affects the SJPhone version 1.60.303c installed on Dell Axim X3 devices running Windows Mobile 2003.
CVE-2007-3351 involves a remote denial of service attack through a crafted SIP INVITE transaction.
Yes, CVE-2007-3351 can be exploited remotely, allowing attackers to cause a denial of service on the affected devices.