innovaphone IP222 11r2 sr9 Download Denial Of Service
Posted by deepcore on March 26, 2016 – 7:51 am
At startup the innovaphone IP222 sends an HTTP request for a special PNG file to the involved server system. After the download has finished, the image is displayed on the phone by selecting the receiver screen in the menu. Providing a large image file (6.9 MB) within the download process and selecting the receiver screen on the phone will lead to a crash of the application and cause a denial of service condition. Remote code execution via this security vulnerability may also be possible, but was not confirmed by the SySS GmbH.
Post a reply
You must be logged in to post a comment.