CVE-2008-0531

Published: Feb 15, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to execute arbitrary code via a crafted challenge/response message.

Affected (2)

Products: Cisco: Skinny Client Control Protocol (sccp) Firmware, Session Initiation Protocol (sip) Firmware

2 products

Skinny Client Control Protocol (sccp) Firmware

Session Initiation Protocol (sip) Firmware

Configuration A

1 vulnerable · 8 platform

Vulnerable Software	Affected Versions
Cisco Skinny Client Control Protocol (sccp) Firmware	All versions

Running on/with	Platform Versions
Cisco Unified Ip Phone	Version 7906g
Cisco Unified Ip Phone	Version 7911g
Cisco Unified Ip Phone	Version 7935
Cisco Unified Ip Phone	Version 7936
Cisco Unified Ip Phone	Version 7941g
Cisco Unified Ip Phone	Version 7961g
Cisco Unified Ip Phone	Version 7970g
Cisco Unified Ip Phone	Version 7971g

Configuration B

1 vulnerable · 4 platform

Vulnerable Software	Affected Versions
Cisco Session Initiation Protocol (sip) Firmware	All versions

Running on/with	Platform Versions
Cisco Unified Ip Phone	Version 7940
Cisco Unified Ip Phone	Version 7940g
Cisco Unified Ip Phone	Version 7960
Cisco Unified Ip Phone	Version 7960g

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://secunia.com/advisories/28935

Source: psirt@cisco.com

Vendor Advisory

http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml

Source: psirt@cisco.com

Patch

http://www.securityfocus.com/bid/27774

Source: psirt@cisco.com

http://www.securitytracker.com/id?1019411

Source: psirt@cisco.com

http://www.vupen.com/english/advisories/2008/0543

Source: psirt@cisco.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/40498

Source: psirt@cisco.com

http://secunia.com/advisories/28935

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.cisco.com/en/US/products/products_security_advisory09186a0080949c7a.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/27774

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019411

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0543

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/40498

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.