Summary
Asterisk is prone to a remote denial-of-service vulnerability because it fails to properly handle malformed RTP comfort noise data.
Successful exploits can crash the application, resulting in denial-of- service conditions for legitimate users.
Solution
Updates are available. Please see the references for details.
References
Severity
Classification
-
CVE CVE-2009-4055 -
CVSS Base Score: 5.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
Related Vulnerabilities
- Adobe Flash Player Multiple Security Bypass Vulnerabilities - 01 Feb14 (Windows)
- Active Perl CGI.pm 'Set-Cookie' and 'P3P' HTTP Header Injection Vulnerability (Win)
- Adobe Reader Plugin Signature Bypass Vulnerability (Mac OS X)
- Apache Tomcat servlet/JSP container default files
- Apple Safari JavaScript Implementation Information Disclosure Vulnerability (Mac OS X)