FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

asterisk -- denial of service vulnerability, local system access

Affected packages
asterisk < 1.2.7

Details

VuXML ID 8b683bea-d49c-11da-a672-000e0c2e438a
Discovery 2006-04-07
Entry 2006-04-25

Emmanouel Kellenis reports a denial of service vulnerability within asterisk. The vulnerability is caused by a buffer overflow in "format_jpeg.c". A large JPEG image could trigger this bug, potentially allowing a local attacker to execute arbitrary code.

References

Bugtraq ID 17561
CVE Name CVE-2006-1827
URL http://www.cipher.org.uk/index.php?p=advisories/Asterisk_Codec_Integer_Overflow_07-04-2006.advisory