CVE-2007-3369: Buffer Overflow

Published Jun 22, 2007

Updated

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service (device hang or reboot) via an INVITE message with a long Via header.

Affected Software

1 affected component

Polycom SoundPoint IP 601=1.6.3.0067_bootrom_3.0.0

Remediation

Patch Available

http://www.sipera.com/index.php?action=resources,threat_advisory&tid=272&

Event History

Jun 22, 2007

CVE Published

06:30 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3369?

CVE-2007-3369 has a high severity rating as it can lead to a denial of service due to a buffer overflow.

How do I fix CVE-2007-3369?

To fix CVE-2007-3369, upgrade the Polycom SoundPoint IP 601 to a firmware version that addresses this vulnerability.

What devices are affected by CVE-2007-3369?

CVE-2007-3369 affects Polycom SoundPoint IP 601 devices running BootROM version 3.0.x and SIP version 1.6.3.0067.

Can CVE-2007-3369 be exploited remotely?

Yes, CVE-2007-3369 can be exploited remotely through an INVITE message with a long Via header.

What could an attacker achieve by exploiting CVE-2007-3369?

By exploiting CVE-2007-3369, an attacker could cause the device to hang or reboot, resulting in service disruption.