CVE-2007-3762
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame.
Desbordamiento de búfer basado en pila en el controlador de canal IAX2 (chan_iax2) de Asterisk anterior a 1.2.22 y 1.4.x anterior a 1.4.8, Business Edition anterior a B.2.2.1, AsteriskNOW anterior a beta7, Appliance Developer Kit anterior a 0.5.0, y s800i anterior a 1.0.2 permite a atacantes remotos ejecutar código de su elección enviando una trama RTP larga de (1) voz o (2) vídeo.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-07-13 CVE Reserved
- 2007-07-18 CVE Published
- 2024-04-13 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://bugs.gentoo.org/show_bug.cgi?id=185713 | X_refsource_confirm | |
| http://secunia.com/advisories/26099 | Third Party Advisory | |
| http://secunia.com/advisories/29051 | Third Party Advisory | |
| http://www.securityfocus.com/bid/24949 | Vdb Entry | |
| http://www.securitytracker.com/id?1018407 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2007/2563 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/35466 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://ftp.digium.com/pub/asa/ASA-2007-014.pdf | 2017-07-29 |
| URL | Date | SRC |
|---|---|---|
| http://security.gentoo.org/glsa/glsa-200802-11.xml | 2017-07-29 | |
| http://www.debian.org/security/2007/dsa-1358 | 2017-07-29 | |
| http://www.novell.com/linux/security/advisories/2007_15_sr.html | 2017-07-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0 Search vendor "Asterisk" for product "Asterisk" and version "1.0" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.6 Search vendor "Asterisk" for product "Asterisk" and version "1.0.6" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.7 Search vendor "Asterisk" for product "Asterisk" and version "1.0.7" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.8 Search vendor "Asterisk" for product "Asterisk" and version "1.0.8" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.9 Search vendor "Asterisk" for product "Asterisk" and version "1.0.9" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.10 Search vendor "Asterisk" for product "Asterisk" and version "1.0.10" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.11 Search vendor "Asterisk" for product "Asterisk" and version "1.0.11" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.0.12 Search vendor "Asterisk" for product "Asterisk" and version "1.0.12" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.0_beta1 Search vendor "Asterisk" for product "Asterisk" and version "1.2.0_beta1" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.0_beta2 Search vendor "Asterisk" for product "Asterisk" and version "1.2.0_beta2" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.5 Search vendor "Asterisk" for product "Asterisk" and version "1.2.5" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.6 Search vendor "Asterisk" for product "Asterisk" and version "1.2.6" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.7 Search vendor "Asterisk" for product "Asterisk" and version "1.2.7" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.8 Search vendor "Asterisk" for product "Asterisk" and version "1.2.8" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.9 Search vendor "Asterisk" for product "Asterisk" and version "1.2.9" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.10 Search vendor "Asterisk" for product "Asterisk" and version "1.2.10" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.11 Search vendor "Asterisk" for product "Asterisk" and version "1.2.11" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.12 Search vendor "Asterisk" for product "Asterisk" and version "1.2.12" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.13 Search vendor "Asterisk" for product "Asterisk" and version "1.2.13" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.14 Search vendor "Asterisk" for product "Asterisk" and version "1.2.14" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.15 Search vendor "Asterisk" for product "Asterisk" and version "1.2.15" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.16 Search vendor "Asterisk" for product "Asterisk" and version "1.2.16" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.2.17 Search vendor "Asterisk" for product "Asterisk" and version "1.2.17" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.4.1 Search vendor "Asterisk" for product "Asterisk" and version "1.4.1" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.4.2 Search vendor "Asterisk" for product "Asterisk" and version "1.4.2" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.4.4_2007-04-27 Search vendor "Asterisk" for product "Asterisk" and version "1.4.4_2007-04-27" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | 1.4_beta Search vendor "Asterisk" for product "Asterisk" and version "1.4_beta" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | a Search vendor "Asterisk" for product "Asterisk" and version "a" | business |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | b.1.3.2 Search vendor "Asterisk" for product "Asterisk" and version "b.1.3.2" | business |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | b.1.3.3 Search vendor "Asterisk" for product "Asterisk" and version "b.1.3.3" | business |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Search vendor "Asterisk" for product "Asterisk" | b.2.2.0 Search vendor "Asterisk" for product "Asterisk" and version "b.2.2.0" | business |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisk Appliance Developer Kit Search vendor "Asterisk" for product "Asterisk Appliance Developer Kit" | <= 0.4 Search vendor "Asterisk" for product "Asterisk Appliance Developer Kit" and version " <= 0.4" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisknow Search vendor "Asterisk" for product "Asterisknow" | beta_5 Search vendor "Asterisk" for product "Asterisknow" and version "beta_5" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | Asterisknow Search vendor "Asterisk" for product "Asterisknow" | beta_6 Search vendor "Asterisk" for product "Asterisknow" and version "beta_6" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | S800i Appliance Search vendor "Asterisk" for product "S800i Appliance" | 1.0 Search vendor "Asterisk" for product "S800i Appliance" and version "1.0" | - |
Affected
| ||||||
| Asterisk Search vendor "Asterisk" | S800i Appliance Search vendor "Asterisk" for product "S800i Appliance" | 1.0.1 Search vendor "Asterisk" for product "S800i Appliance" and version "1.0.1" | - |
Affected
| ||||||