← Database

CVE-2004-1940

MEDIUM CVSS: 5.0 Published: 2004-12-31 Modified: 2026-06-16

Description

sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN response packet with a large attrLen value that causes an out-of-bounds read.

Affected Platforms

Wirlab Kphone

Weakness Type

CWE-125

References