First published: Wed Jun 27 2007(Updated: )
Buffer overflow in SJ Labs SJphone 1.60.303c, running under Windows Mobile 2003 on the Samsung SCH-i730 phone, allows remote attackers to cause a denial of service (device hang and call termination) via a malformed SIP INVITE message, a different vulnerability than CVE-2007-3351.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Windows Mobile Connectivity Tools | =2003 | |
SJ Labs SJphone | =1.60.303c | |
Securecomputing Sch I730 Phone |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-3445 is considered a high-severity vulnerability that can lead to denial of service.
To mitigate CVE-2007-3445, consider updating the SJ Labs SJphone software to a more secure version or reviewing SIP message handling.
CVE-2007-3445 specifically affects SJ Labs SJphone version 1.60.303c running on Windows Mobile 2003.
While CVE-2007-3445 primarily causes device hang and call termination, it may lead to a disruption in ongoing communications but does not directly cause data loss.
Yes, exploits for CVE-2007-3445 typically involve sending malformed SIP INVITE messages to trigger the vulnerability.