CVE-2007-3762
ASA-2007-014.txt
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame.
Desbordamiento de búfer basado en pila en el controlador de canal IAX2 (chan_iax2) de Asterisk anterior a 1.2.22 y 1.4.x anterior a 1.4.8, Business Edition anterior a B.2.2.1, AsteriskNOW anterior a beta7, Appliance Developer Kit anterior a 0.5.0, y s800i anterior a 1.0.2 permite a atacantes remotos ejecutar código de su elección enviando una trama RTP larga de (1) voz o (2) vídeo.
The Asterisk IAX2 channel driver, chan_iax2, has a remotely exploitable stack buffer overflow vulnerability. It occurs when chan_iax2 is passed a voice or video frame with a data payload larger than 4 kB. This is exploitable by sending a very large RTP frame to an active RTP port number used by Asterisk when the other end of the call is an IAX2 channel. Exploiting this issue can cause a crash or allow arbitrary code execution on a remote machine.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-07-13 CVE Reserved
- 2007-07-18 CVE Published
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://bugs.gentoo.org/show_bug.cgi?id=185713 | X_refsource_confirm | |
| http://secunia.com/advisories/26099 | Third Party Advisory | |
| http://secunia.com/advisories/29051 | Third Party Advisory | |
| http://www.securityfocus.com/bid/24949 | Vdb Entry | |
| http://www.securitytracker.com/id?1018407 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2007/2563 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/35466 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://ftp.digium.com/pub/asa/ASA-2007-014.pdf | 2017-07-29 |
| URL | Date | SRC |
|---|---|---|
| http://security.gentoo.org/glsa/glsa-200802-11.xml | 2017-07-29 | |
| http://www.debian.org/security/2007/dsa-1358 | 2017-07-29 | |
| http://www.novell.com/linux/security/advisories/2007_15_sr.html | 2017-07-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0 Search vendor "Asterisk" for product "Asterisk" and version "1.0" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.6 Search vendor "Asterisk" for product "Asterisk" and version "1.0.6" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.7 Search vendor "Asterisk" for product "Asterisk" and version "1.0.7" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.8 Search vendor "Asterisk" for product "Asterisk" and version "1.0.8" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.9 Search vendor "Asterisk" for product "Asterisk" and version "1.0.9" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.10 Search vendor "Asterisk" for product "Asterisk" and version "1.0.10" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.11 Search vendor "Asterisk" for product "Asterisk" and version "1.0.11" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.12 Search vendor "Asterisk" for product "Asterisk" and version "1.0.12" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.0_beta1 Search vendor "Asterisk" for product "Asterisk" and version "1.2.0_beta1" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.0_beta2 Search vendor "Asterisk" for product "Asterisk" and version "1.2.0_beta2" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.5 Search vendor "Asterisk" for product "Asterisk" and version "1.2.5" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.6 Search vendor "Asterisk" for product "Asterisk" and version "1.2.6" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.7 Search vendor "Asterisk" for product "Asterisk" and version "1.2.7" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.8 Search vendor "Asterisk" for product "Asterisk" and version "1.2.8" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.9 Search vendor "Asterisk" for product "Asterisk" and version "1.2.9" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.10 Search vendor "Asterisk" for product "Asterisk" and version "1.2.10" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.11 Search vendor "Asterisk" for product "Asterisk" and version "1.2.11" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.12 Search vendor "Asterisk" for product "Asterisk" and version "1.2.12" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.13 Search vendor "Asterisk" for product "Asterisk" and version "1.2.13" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.14 Search vendor "Asterisk" for product "Asterisk" and version "1.2.14" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.15 Search vendor "Asterisk" for product "Asterisk" and version "1.2.15" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.16 Search vendor "Asterisk" for product "Asterisk" and version "1.2.16" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.17 Search vendor "Asterisk" for product "Asterisk" and version "1.2.17" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.4.1 Search vendor "Asterisk" for product "Asterisk" and version "1.4.1" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.4.2 Search vendor "Asterisk" for product "Asterisk" and version "1.4.2" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.4.4_2007-04-27 Search vendor "Asterisk" for product "Asterisk" and version "1.4.4_2007-04-27" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.4_beta Search vendor "Asterisk" for product "Asterisk" and version "1.4_beta" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | a Search vendor "Asterisk" for product "Asterisk" and version "a" | business |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | b.1.3.2 Search vendor "Asterisk" for product "Asterisk" and version "b.1.3.2" | business |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | b.1.3.3 Search vendor "Asterisk" for product "Asterisk" and version "b.1.3.3" | business |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | b.2.2.0 Search vendor "Asterisk" for product "Asterisk" and version "b.2.2.0" | business |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Appliance Developer Kit Search vendor "Asterisk" for product "Asterisk Appliance Developer Kit" | <= 0.4 Search vendor "Asterisk" for product "Asterisk Appliance Developer Kit" and version " <= 0.4" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisknow Search vendor "Asterisk" for product "Asterisknow" | beta_5 Search vendor "Asterisk" for product "Asterisknow" and version "beta_5" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisknow Search vendor "Asterisk" for product "Asterisknow" | beta_6 Search vendor "Asterisk" for product "Asterisknow" and version "beta_6" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | S800i Appliance Search vendor "Asterisk" for product "S800i Appliance" | 1.0 Search vendor "Asterisk" for product "S800i Appliance" and version "1.0" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | S800i Appliance Search vendor "Asterisk" for product "S800i Appliance" | 1.0.1 Search vendor "Asterisk" for product "S800i Appliance" and version "1.0.1" | - |
Affected
| ||||||