NCH Software Office Intercom SIP Invite Remote Denial of Service Vulnerability

Bugtraq ID:	45049
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 25 2010 12:00AM
Updated:	Nov 25 2010 12:00AM
Credit:	xsploited security
Vulnerable:	NCH Software Office Intercom 5.20
Not Vulnerable:

NCH Software Office Intercom SIP Invite Remote Denial of Service Vulnerability

NCH Software Office Intercom is prone to a remote denial-of-service vulnerability because it fails to properly handle specially crafted SIP 'INVITE' requests.

Exploiting this issue allows remote attackers to cause a denial-of-service due to a NULL-pointer dereference. Due to the nature of this issue, remote code execution may be possible; this has not been confirmed.

Office Intercom 5.20 is vulnerable; other versions may also be affected.

NCH Software Office Intercom SIP Invite Remote Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/45049.py

NCH Software Office Intercom SIP Invite Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NCH Software Office Intercom SIP Invite Remote Denial of Service Vulnerability

References:

• Office Intercom Homepage (NCH Software)