CVE-2007-5358: Buffer Overflow
Multiple buffer overflows in the voicemail functionality in Asterisk 1.4.x before 1.4.13, when using IMAP storage, might allow (1) remote attackers to execute arbitrary code via a long combination of Content-type and Content-description headers, or (2) local users to execute arbitrary code via a long combination of astspooldir, voicemail context, and voicemail mailbox fields. NOTE: vector 2 requires write access to Asterisk configuration files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-5358?
CVE-2007-5358 is considered critical due to its potential for remote code execution through buffer overflows.
How do I fix CVE-2007-5358?
To fix CVE-2007-5358, upgrade Asterisk to version 1.4.13 or later.
What types of attacks can be performed using CVE-2007-5358?
CVE-2007-5358 allows for remote attackers to execute arbitrary code via crafted Content-type and Content-description headers.
Which versions of Asterisk are affected by CVE-2007-5358?
Asterisk versions before 1.4.13, specifically 1.4.x versions up to 1.4.12, are affected by CVE-2007-5358.
Who is at risk from CVE-2007-5358?
Both remote attackers and local users may exploit CVE-2007-5358 to execute arbitrary code on affected systems.