|
|
|
|
| |
Credit:
The information has been provided by Sipera .
|
| |
Vulnerable Systems:
* BlackBerry 7270 smartphone
* BlackBerry Device Software 4.0 Service Pack 1 Bundle 83 and earlier
A DoS may occur in the Phone application of the BlackBerry 7270 smartphone.
A person with malicious intent sends a malformed SIP INVITE message that includes a Uniform Resource Identifier (URI) with a user name, but no host name in the Contact header to the BlackBerry 7270 smartphone. As a result, format string vulnerabilities on the BlackBerry smartphone may prevent the BlackBerry smartphone user from making a call using the Phone application on the BlackBerry 7270 smartphone.
Vendor Status:
Blackberry had issued a security update for this vulnerability
Patch Availability:
http://btsc.webapps.blackberry.com/btsc/viewdocument.do?noCount=true&externalId=KB12707&sliceId=1&cmd=displayKC&docType=kc&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl
CVE Information:
CVE-2007-3442
|
|
|
|
|