Vulnerability Details CVE-2013-2685
Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol (SDP) header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.089
EPSS Ranking 92.2%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2013-2685
-
cpe:2.3:a:asterisk:open_source:11.0.0
-
cpe:2.3:a:asterisk:open_source:11.0.1
-
cpe:2.3:a:asterisk:open_source:11.0.2
-
cpe:2.3:a:asterisk:open_source:11.1.0
-
cpe:2.3:a:asterisk:open_source:11.1.1
-
cpe:2.3:a:asterisk:open_source:11.1.2
-
cpe:2.3:a:asterisk:open_source:11.2.0
-
cpe:2.3:a:asterisk:open_source:11.2.1