Zoiper < 2.24 SIP INVITE Request Remote DoS
Medium Nessus Network Monitor Plugin ID 5630
SynopsisThe remote host is vulnerable to a denial-of-service attack.
DescriptionThe remote host is running Zoiper, a cross-platform VoIP solution.
Versions of Zoiper earlier than 2.24 Library 5324 are potentially affected by a denial-of-service vulnerability because the application fails to properly handle specially crafted SIP INVITE Requests. An attacker, exploiting this flaw, could potentially crash the affected application.
SolutionUpgrade to Zoiper 2.24 Library 5324 or later.