Vulnerability Database

296,362

Total vulnerabilities in the database

CVE-2007-3286

Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.0, allow remote attackers to execute arbitrary code via unspecified vectors.

Published: Sep 19, 2007
Updated: Apr 13, 2023
CVE: CVE-2007-3286
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-119

Affected Software
References

Software	From	Fixed in
avaya / ip_soft_phone	6.0	6.0.x
avaya / ip_soft_phone	-	5.2.x

http://osvdb.org/38258
http://support.avaya.com/elmodocs2/security/ASA-2007-314.htm
http://www.securityfocus.com/bid/25707

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo