CVE-2007-3443

Severity Score

7.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 does not properly manage transaction states, which allows remote attackers to cause a denial of service (temporary device hang) by sending a certain SIP INVITE message, but not providing an ACK when the call is answered.

The Research en Motion BlackBerry 7270 anterior a 4.0 SP1 Bundle 108 no maneja adecuadamente los estados de las transacciones, lo cual permite a atacantes remotos provocar una denegación de servicio (cuelgue temporal del dispositivo) enviando cierto mensaje SIP INVITE, pero que no proporciona un ACK cuando la llamada es contestada.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Adjacent

Attack Complexity

Medium

Authentication

Single

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-06-26 CVE Reserved
2007-06-27 CVE Published
2024-08-07 CVE Updated
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (7)

URL	Tag	Source
http://osvdb.org/37647	Vdb Entry
http://secunia.com/advisories/25824	Third Party Advisory
http://www.blackberry.com/btsc/articles/220/KB12705_f.SAL_Public.html	X_refsource_confirm
http://www.kb.cert.org/vuls/id/324841	Third Party Advisory
http://www.securityfocus.com/bid/24545	Vdb Entry
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=213&	X_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/35075	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Research In Motion Limited Search vendor "Research In Motion Limited"		Blackberry 7270 Search vendor "Research In Motion Limited" for product "Blackberry 7270"				<= 4.0_sp1_bundle_83 Search vendor "Research In Motion Limited" for product "Blackberry 7270" and version " <= 4.0_sp1_bundle_83"		-		Affected