Nortel IP softphone 2050

CPE Details

Nortel IP softphone 2050
nortel
ip_softphone_2050
-
2007-08-23
19h16 +00:00
2008-04-07
12h36 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:nortel:ip_softphone_2050:-:*:*:*:*:*:*:*

Informations

Vendor

nortel

Product

ip_softphone_2050

Version

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2007-5636 2007-10-23 15h00 +00:00 Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary code via a flood of invalid characters to the RTCP port (5678/udp) that triggers a Windows error message, aka "extraneous messaging."
7.5
CVE-2007-5639 2007-10-23 15h00 +00:00 The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server.
7.1
CVE-2004-1305 2005-01-06 04h00 +00:00 The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
5
CVE-2004-1319 2005-01-06 04h00 +00:00 The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.
5
CVE-2004-0839 2004-09-14 02h00 +00:00 Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
5