CVE-2008-5180

Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.

• CWE-770
• CWE-770

• http://secunia.com/advisories/32940Broken Link
• http://www.exploit-db.com/exploits/12079Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/39221Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021294Broken Link, Third Party Advisory, VDB Entry
• http://www.voipshield.com/research-details.php?id=133Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46673Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57581Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/7262Exploit, Third Party Advisory, VDB Entry
• http://secunia.com/advisories/32940Broken Link
• http://www.exploit-db.com/exploits/12079Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/39221Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021294Broken Link, Third Party Advisory, VDB Entry
• http://www.voipshield.com/research-details.php?id=133Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46673Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57581Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/7262Exploit, Third Party Advisory, VDB Entry

Published

Nov 20, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-5174SQL injection vulnerability in joke.php in Jokes Complete We…
• CVE-2008-5175Directory traversal vulnerability in the FTP client in AceFT…
• CVE-2008-5176Multiple buffer overflows in Client Software WinCom LPD Tota…
• CVE-2008-5177Stack-based buffer overflow in the DtbClsLogin function in Y…
• CVE-2008-5178Heap-based buffer overflow in Opera 9.62 on Windows allows r…
• CVE-2008-5179Unspecified vulnerability in Microsoft Office Communications…
• CVE-2008-5181Microsoft Communicator allows remote attackers to cause a de…
• CVE-2008-5182The inotify functionality in Linux kernel 2.6 before 2.6.28-…
• CVE-2008-5183cupsd in CUPS 1.3.9 and earlier allows local users, and poss…7.5
• CVE-2008-5184The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 use…
• CVE-2008-5185The highlighting functionality in geshi.php in GeSHi before …
• CVE-2008-5186The set_language_path function in geshi.php in Generic Synta…