Vulnerability in Zoiper

CVE-2009-3704

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service (crash) via a SIP INVITE request with an empty Call-Info header.

EPSS: 0.081 (94.2th percentile) — read the EPSS interpretation.

Affected products

  • Zoiper — versions 2.0, 2.10, 2.11
  • N/a — versions n/a

References