CVE-2008-5180

CVSS 5.3 MEDIUMEPSS 68.0%CWE-770

Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

n/a · n/a

public PoCs found — 3

cve_referencewww.exploit-db.com/exploits/12079unverified cve_referencewww.exploit-db.com/exploits/7262unverified exploitdbwww.exploit-db.com/exploits/12079unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/32940 https://exchange.xforce.ibmcloud.com/vulnerabilities/46673 https://exchange.xforce.ibmcloud.com/vulnerabilities/57581 https://www.exploit-db.com/exploits/7262 http://www.exploit-db.com/exploits/12079 http://www.securityfocus.com/bid/39221 http://www.securitytracker.com/id?1021294 http://www.voipshield.com/research-details.php?id=133