CVE-2008-5180

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 68.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-11-20 · updated 2026-06-16
Weakness: CWE-770

Description

Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.

Affected products

Microsoft Office Communicator: all versions

References

http://secunia.com/advisories/32940
http://www.exploit-db.com/exploits/12079
http://www.securityfocus.com/bid/39221
http://www.securitytracker.com/id?1021294
http://www.voipshield.com/research-details.php?id=133
https://exchange.xforce.ibmcloud.com/vulnerabilities/46673
https://exchange.xforce.ibmcloud.com/vulnerabilities/57581
https://www.exploit-db.com/exploits/7262
http://secunia.com/advisories/32940
http://www.exploit-db.com/exploits/12079
http://www.securityfocus.com/bid/39221
http://www.securitytracker.com/id?1021294

Get alerted when CVE-2008-5180 or the next vulnerability affects your stack