Secunia

Mu Security has reported a vulnerability in Asterisk, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the MGCP implementation and can be exploited to cause a stack-based buffer overflow by sending a specially crafted AUEP response message.

The vulnerability has been reported in versions 1.0.0 through 1.2.10. Other versions may also be affected.

A format string error in the Record application was also reported.

Solution
Update to version 1.2.11.

Provided and/or discovered by
Mu Security research team

Original Advisory
http://labs.musecurity.com/advisories/MU-200608-01.txt

Deep Links
Links available in Customer Area