NCH Software Office Intercom is prone to a remote denial-of-service vulnerability because it fails to properly handle specially crafted SIP INVITE requests. Exploiting this issue allows remote attackers to cause a denial-of- service due to a NULL-pointer dereference. Due to the nature of this issue, remote code execution may be possible this has not been confirmed. Office Intercom 5.20 is vulnerable other versions may also be affected.

• http://www.nch.com.au/oi/
• https://www.securityfocus.com/bid/45049

---

Updated on 2015-03-25