vendor:
Smartphone
by:
SecurityFocus
7.5
CVSS
HIGH
Denial-of-Service
N/A
CWE
Product Name: Smartphone
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: Yes
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2005
eStara Smartphone Denial-of-Service Vulnerabilities
eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. For the negative 'Expires' field issue, an attacker can send an OPTIONS request with an Expires field set to a negative value. For the 'Content-Length' field issue, an attacker can send an INVITE request with a Content-Length field set to a large value.
Mitigation:
It is recommended to update to the latest version of eStara Smartphone.
