2.3

CVE-2007-3443

The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 does not properly manage transaction states, which allows remote attackers to cause a denial of service (temporary device hang) by sending a certain SIP INVITE message, but not providing an ACK when the call is answered.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Research In Motion Limited ≫ Blackberry 7270 Version <= 4.0_sp1_bundle_83
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.6% 0.438
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.3 4.4 2.9
AV:A/AC:M/Au:S/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/25824
http://osvdb.org/37647
http://www.blackberry.com/btsc/articles/220/KB12705_f.SAL_Public.html
http://www.kb.cert.org/vuls/id/324841
US Government Resource
http://www.securityfocus.com/bid/24545
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=213&
https://exchange.xforce.ibmcloud.com/vulnerabilities/35075