CVE-2007-3438

HIGH 7.8CVE-2007-3438 · Published 27/06/2007 · updated 16/06/2026

In short

CVE-2007-3438 is a HIGH (CVSS 7.8) vulnerability affecting sip softphone (nortel).
Chance of exploitation in the next 30 days (EPSS): 2.5%, higher than 84.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sip softphone nortel	`= 4.13.5.208`	No fix yet

Description

Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361.

References

osvdb.org/45429
sipera.com/index.php

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free