CVE-2007-3438: Nortel SIP Softphone

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Buffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to execute arbitrary code via a malformed message, a different vulnerability than CVE-2007-3361.

Affected products

• Nortel SIP Softphone: version 4.13.5.208 only

Published 2007-06-27. Last modified 2026-06-16.