VULNERABILITY INTELLIGENCE
CVE-2007-3438
CVSS score7.8 HIGH
EPSS probability2.46%
CISA KEVNot currently listed
Published2007-06-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361.