CVE-2006-2923
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 4.4%
The iax_net_read function in the iaxclient open source library, as used in multiple products including (a) LoudHush 1.3.6, (b) IDE FISK 1.35 and earlier, (c) Kiax 0.8.5 and earlier, (d) DIAX, (e) Ziaxphone, (f) IAX Phone, (g) X-lite, (h) MediaX, (i) Extreme Networks ePhone, and (j) iaxComm before 1.2.0, allows remote attackers to execute arbitrary code via crafted IAX 2 (IAX2) packets with truncated (1) full frames or (2) mini-frames, which are detected in a length check but still processed, leading to buffer overflows related to negative length values.
Productos afectados
n/a · n/aReferencias
http://iaxclient.sourceforge.net/iaxcomm/http://secunia.com/advisories/20466http://secunia.com/advisories/20560http://secunia.com/advisories/20567http://secunia.com/advisories/20623http://secunia.com/advisories/20900https://exchange.xforce.ibmcloud.com/vulnerabilities/27047http://sourceforge.net/project/shownotes.php?release_id=423099&group_id=131960http://www.coresecurity.com/common/showdoc.php?idx=548&idxseccion=10http://www.gentoo.org/security/en/glsa/glsa-200606-30.xmlhttp://www.loudhush.ro/changelog.txthttp://www.securityfocus.com/archive/1/436638/100/0/threaded