ZoIPer Empty Call-Info Denial of Service Vulnerability

  1. Network Vulnerabilities
  2. Denial of Service
  3. ZoIPer Empty Call-Info Denial of Service Vulnerability
Summary
This host is running ZoIPer and is prone to Denial of Service vulnerability.
Impact
Successful exploitation will allow attackers to cause the service to crash. Impact Level: Application
Solution
Upgrade to ZoIPer version 2.24 (Windows) and 2.13 (Linux) or later, http://www.zoiper.com/zoiper.php
Insight
The flaw is due to an error while handling specially crafted SIP INVITE messages which contain an empty Call-Info header.
Affected
ZoIPer version prior to 2.24 (Windows) and 2.13 (Linux)
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities