A vulnerability has been reported in Avaya IP Softphone, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when handling overly large amounts of H.323 data and can be exploited to cause a DoS.

The vulnerability is reported in version 6.01.85. Other versions may also be affected.

Solution
The vendor recommends that local and network access to the affected systems be restricted until an update is available.

Provided and/or discovered by
VoIPshield

Changelog
Further details available to Secunia VIM customers

Original Advisory
Avaya:
http://support.avaya.com/elmodocs2/security/ASA-2008-363.htm

VoIPshield:
http://www.voipshield.com/research-details.php?id=125

Deep Links
Links available to Secunia VIM customers