| AGEphone SIP Packet Handling Buffer Overflow Vulnerability |
|
Credit:
| Discovered by Tan Chew Keong. |
|
Vulnerable:
|
Ageet AGEphone 1.38.1
Ageet AGEphone 1.28
|
|
Description:
|
AGEphone is prone to a remote buffer-overflow vulnerability.
Specifically, this issue presents itself when the application handles a malicious SIP (Session Initiation Protocol) packet.
AGEphone versions 1.24 and 1.38.1 are reported vulnerable; other versions may be affected as well.
|
| Exploit:
|
The researcher responsible for discovering this issue has developed an exploit, but it is currently not publicly available. The following proof of concept is available: |
|
Solution:
|
The vendor has released version 1.40 to address this issue.
Ageet AGEphone 1.28
Ageet AGEphone 1.38.1
|
Subscribe to this comment's feed
Show/Hide comments
Show/Hide comment form