CVE-2008-4444

Published: Jan 16, 2009Modified: Apr 23, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

Cisco Unified IP Phone (aka SIP phone) 7960G and 7940G with firmware P0S3-08-9-00 and possibly other versions before 8.10 allows remote attackers to cause a denial of service (device reboot) or possibly execute arbitrary code via a Realtime Transport Protocol (RTP) packet with malformed headers.

Affected (2)

Products: Cisco: Unified Ip Phone 7940g, Unified Ip Phone 7960g

2 products

Unified Ip Phone 7940g

Unified Ip Phone 7960g

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Ip Phone 7940g	All versions
Cisco Unified Ip Phone 7960g	All versions

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://securityreason.com/securityalert/4917

Source: cve@mitre.org

http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7960g_7940g/firmware/sip/8_10/english/release/notes/796040sip_810.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/500059/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/33264

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/47948

Source: cve@mitre.org

http://securityreason.com/securityalert/4917

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7960g_7940g/firmware/sip/8_10/english/release/notes/796040sip_810.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/500059/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/33264

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/47948

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.