Vulnerability in Nortel Sip Softphone

CVE-2007-3438

Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361.

EPSS: 0.025 (82.8th percentile) — read the EPSS interpretation.

Affected products

References