CVE-2007-3762
Summary
| CVE | CVE-2007-3762 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-07-18 17:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame. |
Risk And Classification
Primary CVSS: v2.0 9.3 from [email protected]
AV:N/AC:M/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-Other | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:M/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Asterisk | Asterisk | 1.0 | All | All | All |
| Application | Asterisk | Asterisk | 1.0.10 | All | All | All |
| Application | Asterisk | Asterisk | 1.0.11 | All | All | All |
| Application | Asterisk | Asterisk | 1.0.12 | All | All | All |
| Application | Asterisk | Asterisk | 1.0.6 | All | All | All |
| Application | Asterisk | Asterisk | 1.0.7 | All | All | All |
| Application | Asterisk | Asterisk | 1.0.8 | All | All | All |
| Application | Asterisk | Asterisk | 1.0.9 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.0_beta1 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.0_beta2 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.10 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.11 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.12 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.13 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.14 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.15 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.16 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.17 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.5 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.6 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.7 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.8 | All | All | All |
| Application | Asterisk | Asterisk | 1.2.9 | All | All | All |
| Application | Asterisk | Asterisk | 1.4.1 | All | All | All |
| Application | Asterisk | Asterisk | 1.4.2 | All | All | All |
| Application | Asterisk | Asterisk | 1.4.4_2007-04-27 | All | All | All |
| Application | Asterisk | Asterisk | 1.4_beta | All | All | All |
| Application | Asterisk | Asterisk | a | All | business | All |
| Application | Asterisk | Asterisk | b.1.3.2 | All | business | All |
| Application | Asterisk | Asterisk | b.1.3.3 | All | business | All |
| Application | Asterisk | Asterisk | b.2.2.0 | All | business | All |
| Application | Asterisk | Asterisknow | beta_5 | All | All | All |
| Application | Asterisk | Asterisknow | beta_6 | All | All | All |
| Application | Asterisk | Asterisk Appliance Developer Kit | All | All | All | All |
| Hardware | Asterisk | S800i Appliance | 1.0 | All | All | All |
| Hardware | Asterisk | S800i Appliance | 1.0.1 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ftp.digium.com/pub/asa/ASA-2007-014.pdf | af854a3a-2127-422b-91ae-364da2661108 | ftp.digium.com | Patch |
| Asterisk IAX2 Channel Driver IAX2_Write Function Remote Stack Buffer Overflow Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Gentoo Linux Documentation -- Asterisk: Multiple vulnerabilities | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Gentoo update for asterisk - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SecurityTracker.com Archives - Asterisk STUN, Skinny Channel Driver, and IAX2 Channel Driver Bugs Let Remote Users Deny Service or Execute Arbitrary Code | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | |
| Asterisk Multiple Vulnerabilities - Advisories - Secunia | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Debian -- Security Information -- DSA-1358-1 asterisk | af854a3a-2127-422b-91ae-364da2661108 | www.debian.org | |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| Gentoo Bug 185713 - net-misc/asterisk Multiple issues (CVE-2007-{376[234]|4103}) | af854a3a-2127-422b-91ae-364da2661108 | bugs.gentoo.org | |
| Security Announcement | af854a3a-2127-422b-91ae-364da2661108 | www.novell.com | |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.