Nortel UNIStim IP Softphone Buffer Overflow Vulnerability (CVE-2007-5636)

Key Information Summary Vulnerability Details Vulnerability Name: Nortel UNIStim IP Softphone Buffer-Overflow CVE ID: CVE-2007-5636 CWE ID: CWE-119 Risk Level: High Local Impact: Yes Remote Impact: Yes Impact Assessment CVSS Base Score: 7.5/10 - Exploitability Subscore: 10/10 - Impact Subscore: 6.4/10 - Confidentiality Impact: Partial - Integrity Impact: Partial - Availability Impact: Partial Attack Complexity: Low Authentication Required: None Description Product: IP Softphone Vendor: Nortel Issue: UNIStim IP Softphone Buffer-Overflow Risk: High Effect: Currently not exploitable Author: Cyrill Brunschwiler (cyrill.bruns...@csnc.ch) Release Date: October 18, 2007 Introduction Flooding the RTP port on the UNIStim IP Softphone with garbage data immediately causes a Windows system error, primarily due to memory corruption (buffer overflow). This vulnerability could potentially be exploited to gain user privileges on the client workstation and execute malicious commands or code. Vulnerability Status Nortel has logged this issue as: Title: UNIStim IP Softphone - Potential Vulnerability Due to Buffer Overflow ID: 2007008382 Affected Versions IP Softphone 2050 Vulnerability Management June 2007: Vulnerability discovered June 2007: Nortel security notification issued October 2007: Nortel advisory available October 2007: Compass Security Information published Remediation According to Nortel, the vulnerability is still under investigation. If new preventive information emerges from the investigation, Nortel’s advisory will be re-released. References ![](http://www.csnc.ch/static/advisory/secadvisorylist.html)

Goal Reached Thanks to every supporter — we hit 100%!

Nortel UNIStim IP Softphone Buffer Overflow Vulnerability (CVE-2007-5636)