CVE-2007-3361

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-22 · updated 2026-06-16

Description

The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device crash) via a SIP message with a malformed header.

Affected products

Nortel Pc Client Soft Phone Sip: 4.1

References

http://osvdb.org/37498
http://secunia.com/advisories/25782
http://www.securityfocus.com/bid/24536
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=298&
http://www.vupen.com/english/advisories/2007/2319
https://exchange.xforce.ibmcloud.com/vulnerabilities/35154
http://osvdb.org/37498
http://secunia.com/advisories/25782
http://www.securityfocus.com/bid/24536
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=298&
http://www.vupen.com/english/advisories/2007/2319
https://exchange.xforce.ibmcloud.com/vulnerabilities/35154

Get alerted when CVE-2007-3361 or the next vulnerability affects your stack