vulnwire
7.8high

CVE-2007-3369

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
7.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.2%
percentile 83%
Public exploits
0
none known

Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a denial of service (device hang or reboot) via an INVITE message with a long Via header.

Exploit prediction (EPSS)

2.22% probability of exploitation in the next 30 days, higher than 83% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.8AV:N/AC:L/Au:N/C:N/I:N/A:C

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

  • secunia.com /advisories/25780 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • securityfocus.com /bid/24542 · vdb-entry, x_refsource_BID, x_transferred
  • knowledgebase.polycom.com /KanisaPlatform/Publishing/927/11898_f.SAL_PUBLIC_1_2.html · x_refsource_CONFIRM, x_transferred
  • polycom.com /common/pw_item_show_doc/1%2C%2C7482%2C00.pdf · x_refsource_CONFIRM, x_transferred
  • osvdb.org /37610 · vdb-entry, x_refsource_OSVDB, x_transferred
  • vupen.com /english/advisories/2007/2329 · vdb-entry, x_refsource_VUPEN, x_transferred
  • sipera.com /index.php?action=resources%2Cthreat_advisory&tid=272& · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.