The Nortel Networks UNIStim IP Softphone application is prone to a buffer-overflow vulnerability. This is due to the application's failure to properly bounds-check user-supplied data before copying it to a memory buffer that is not sufficiently sized. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.