CVE-2013-2685 in Asterisk信息

摘要

由 VulDB • 2026-07-15

Asterisk Open Source 11.x（低于 11.2.2）版本中 res/res_format_attr_h264.c 存在基于栈的缓冲区溢出漏洞，远程攻击者可通过在会话描述协议（SIP Session Description Protocol, SDP）头部中使用包含长 sprop-parameter-sets H.264 媒体属性的方式执行任意代码。

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2013-03-25

披露

2013-04-01

管理

已接受

条目

VDB-8120

CPE

准备好

CWE

CWE-119 (已确认)

CVSS

7.5 (NVD)

EPSS

0.02621

KEV

否

活动

非常低

部门

Finance, Pharma, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2013-2685
NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-2685
CVE Details	https://www.cvedetails.com/cve/CVE-2013-2685/

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!