CVE-2007-3762

Published: Jul 18, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame.

Affected (36)

Products: Asterisk: Asterisk, Asterisk Appliance Developer Kit, Asterisknow, S800i Appliance

Asterisk

4 products

Asterisk

Asterisk Appliance Developer Kit

Asterisknow

S800i Appliance

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Asterisk Asterisk	Version 1.0.10
Asterisk Asterisk	Version 1.0.11
Asterisk Asterisk	Version 1.0.12
Asterisk Asterisk	Version 1.0.6
Asterisk Asterisk	Version 1.0.7
Asterisk Asterisk	Version 1.0.8
Asterisk Asterisk	Version 1.0.9
Asterisk Asterisk	Version 1.0
Asterisk Asterisk	Version 1.2.0_beta1
Asterisk Asterisk	Version 1.2.0_beta2
Asterisk Asterisk	Version 1.2.10
Asterisk Asterisk	Version 1.2.11
Asterisk Asterisk	Version 1.2.12
Asterisk Asterisk	Version 1.2.13
Asterisk Asterisk	Version 1.2.14
Asterisk Asterisk	Version 1.2.15
Asterisk Asterisk	Version 1.2.16
Asterisk Asterisk	Version 1.2.17
Asterisk Asterisk	Version 1.2.5
Asterisk Asterisk	Version 1.2.6
Asterisk Asterisk	Version 1.2.7
Asterisk Asterisk	Version 1.2.8
Asterisk Asterisk	Version 1.2.9
Asterisk Asterisk	Version 1.4.1
Asterisk Asterisk	Version 1.4.2
Asterisk Asterisk	Version 1.4.4_2007-04-27
Asterisk Asterisk	Version 1.4_beta
Asterisk Asterisk	Version a
Asterisk Asterisk	Version b.1.3.2
Asterisk Asterisk	Version b.1.3.3
Asterisk Asterisk	Version b.2.2.0
Asterisk Asterisk Appliance Developer Kit	Up to 0.4
Asterisk Asterisknow	Version beta_5
Asterisk Asterisknow	Version beta_6