DEBIAN-CVE-2007-3762

Source
https://security-tracker.debian.org/tracker/CVE-2007-3762
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2007-3762.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2007-3762
Upstream
Published
2007-07-18T17:30:00Z
Modified
2025-11-19T02:02:43.447222Z
Summary
[none]
Details

Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame.

References

Affected packages

Debian:11 / asterisk

Package

Name
asterisk
Purl
pkg:deb/debian/asterisk?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:1.4.8~dfsg-1

Ecosystem specific

{
    "urgency": "high"
}