CVE-2008-0528

Published: Feb 15, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrary code via a SIP message with crafted MIME data.

Affected (2)

Products: Cisco: Skinny Client Control Protocol (sccp) Firmware, Session Initiation Protocol (sip) Firmware

2 products

Skinny Client Control Protocol (sccp) Firmware

Session Initiation Protocol (sip) Firmware

Configuration A

1 vulnerable · 8 platform

Vulnerable Software	Affected Versions
Cisco Skinny Client Control Protocol (sccp) Firmware	All versions

Running on/with	Platform Versions
Cisco Unified Ip Phone	Version 7906g
Cisco Unified Ip Phone	Version 7911g
Cisco Unified Ip Phone	Version 7935
Cisco Unified Ip Phone	Version 7936
Cisco Unified Ip Phone	Version 7941g
Cisco Unified Ip Phone	Version 7961g
Cisco Unified Ip Phone	Version 7970g
Cisco Unified Ip Phone	Version 7971g

Configuration B

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Cisco Session Initiation Protocol (sip) Firmware	All versions

Running on/with	Platform Versions
Cisco Unified Ip Phone	Version 7940
Cisco Unified Ip Phone	Version 7940g
Cisco Unified Ip Phone	Version 7960
Cisco Unified Ip Phone	Version 7960g

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://secunia.com/advisories/28935

Source: psirt@cisco.com

Vendor Advisory

http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml

Source: psirt@cisco.com

Patch

http://www.securityfocus.com/bid/27774

Source: psirt@cisco.com

http://www.securitytracker.com/id?1019409

Source: psirt@cisco.com

http://www.vupen.com/english/advisories/2008/0543

Source: psirt@cisco.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/40492

Source: psirt@cisco.com

http://secunia.com/advisories/28935

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/27774

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019409

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0543

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/40492

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.