CVE-2007-3443
Last modified
CVE-2007-3443 is a vulnerability of currently unknown severity. The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 does not properly manage transaction states, which allows remote attackers to cause a denial of service (temporary device hang) by sending a certain SIP INVITE message, but not providing an ACK when the call is answered.. EPSS estimates a 0.60% chance of exploitation in the next 30 days.
Description
The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 does not properly manage transaction states, which allows remote attackers to cause a denial of service (temporary device hang) by sending a certain SIP INVITE message, but not providing an ACK when the call is answered.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Research In Motion Limited | Blackberry 7270 | <= 4.0_sp1_bundle_83 |
References
- http://www.kb.cert.org/vuls/id/324841US Government Resource
- http://www.kb.cert.org/vuls/id/324841US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-3443?
How severe is CVE-2007-3443?
How do I fix CVE-2007-3443?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-3437AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows re…
- CVE-2007-3438Buffer overflow in the SIP header parsing module in the Nort…
- CVE-2007-3439The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-…
- CVE-2007-3440The Snom 320 SIP Phone, running snom320 linux 3.25, snom320-…
- CVE-2007-3441Format string vulnerability in the Aastra 9112i SIP Phone wi…
- CVE-2007-3442Format string vulnerability on the Research in Motion BlackB…
- CVE-2007-3444The Research in Motion BlackBerry 7270 with 4.0 SP1 Bundle 8…
- CVE-2007-3445Buffer overflow in SJ Labs SJphone 1.60.303c, running under …
- CVE-2007-3446BugMall Shopping Cart 2.5 and earlier has a default username…
- CVE-2007-3447SQL injection vulnerability in BugMall Shopping Cart 2.5 and…
- CVE-2007-3448Cross-site scripting (XSS) vulnerability in index.php in Bug…
- CVE-2007-3449SQL injection vulnerability in member.php in 6ALBlog allows …
Are you affected by CVE-2007-3443?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST