CVE-2007-4521

Publication date 28 August 2007

Last updated 17 July 2025


Ubuntu priority

Description

Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an "invalid/corrupted" MIME body, which triggers a crash when the recipient listens to voicemail.

Status

Package Ubuntu Release Status
asterisk 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected