CVE-2008-0528: Buffer Overflow
Published Feb 15, 2008
·Updated
Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data.
Affected Software
14 affected components
Cisco Unified IP Phone=7906g
Cisco Unified IP Phone=7911g
Cisco Unified IP Phone=7935
Cisco Unified IP Phone=7936
Cisco Unified IP Phone=7940
Cisco Unified IP Phone=7940g
Cisco Unified IP Phone=7941g
Cisco Unified IP Phone=7960
Cisco Unified IP Phone=7960g
Cisco Unified IP Phone=7961g
Cisco Unified IP Phone=7970g
Cisco Unified IP Phone=7971g
Cisco Skinny Client Control Protocol \(sccp\) Firmware
Cisco Session Initiation Protocol \(sip\) Firmware
Remediation
Event History
Feb 15, 2008
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
02:00 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-0528?
CVE-2008-0528 has been classified as a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2008-0528?
To mitigate CVE-2008-0528, it is recommended to update the affected Cisco Unified IP Phones to the latest SIP firmware provided by Cisco.
3
What Cisco products are affected by CVE-2008-0528?
CVE-2008-0528 affects Cisco Unified IP Phone models 7940, 7940G, 7960, and 7960G running SIP firmware.
4
Can CVE-2008-0528 be exploited remotely?
Yes, CVE-2008-0528 can be exploited remotely through crafted SIP messages.
5
What type of attack is associated with CVE-2008-0528?
CVE-2008-0528 is associated with a buffer overflow attack that can result in arbitrary code execution.