Some vulnerabilities have been reported in the Thomson SpeedTouch 2030 VoIP phone, which can be exploited by malicious people to cause a DoS (Denial of Service).

1) An unspecified error exists in the handling of INVITE messages and can be exploited to crash the device by sending a specially crafted INVITE message containing a slash character after the version in the "Via:" field or an invalid "To:" field.

2) An unspecified error in the handling of network packets can be exploited to crash the device by sending an empty packet to default port 5060/udp.

The vulnerabilities are reported in software version 1.52.1. Other versions may also be affected.

Solution
Use the device in a trusted network environment only.

Provided and/or discovered by
Humberto J. Abdelnur, Radu State, and Olivier Festor

Changelog
Further details available in Customer Area

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065433.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065458.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-August/065478.html

Deep Links
Links available in Customer Area