CVE-2007-3762: Asterisk

High severity, CVSS 9.3. EPSS: 5.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame.

Affected products

• Asterisk Asterisk: version 1.0 only; version 1.0.6 only; version 1.0.7 only; version 1.0.8 only; version 1.0.9 only; version 1.0.10 only; …
• Asterisk Asterisk Appliance Developer Kit: up to and including 0.4
• Asterisk Asterisknow: version beta_5 only; version beta_6 only
• Asterisk s800i Appliance: version 1.0 only; version 1.0.1 only

Published 2007-07-18. Last modified 2026-06-16.