|
|
|
|
| |
Credit:
|
| |
Vulnerable Systems:
* BlackBerry Internet Service 2.0
* Microsoft Internet Explorer
* T-Mobile My E-mail
A BlackBerry 7270 smartphone receives a malicious SIP INVITE message. When the BlackBerry smartphone user ends a received call, the Phone application does not disconnect the call successfully and stops responding for approximately 30 to 40 seconds, until the BlackBerry 7270 smartphone clears the INVITE transaction state properly. The following problems occur on the BlackBerry smartphone:
* The BlackBerry smartphone continues to transmit responses to the SIP INVITE message.
* When the BlackBerry smartphone user tries to initiate the call, the following error message is displayed:Cannot connect. Call in progress
* The BlackBerry smartphone does not receive incoming calls. The caller receives a busy signal.
Vendor Status:
Blackberry had issued a security update for this vulnerability
Patch Availability:
http://btsc.webapps.blackberry.com/btsc/viewdocument.do?noCount=true&externalId=KB12705&sliceId=1&cmd=displayKC&docType=kc&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl
CVE Information:
CVE-2007-3443
|
|
|
|
|
