CVE-2007-5636: Nortel IP Softphone 2050

High severity, CVSS 7.5. EPSS: 6.7% chance of exploitation in the next 30 days.

Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service (application abort) and possibly execute arbitrary code via a flood of invalid characters to the RTCP port (5678/udp) that triggers a Windows error message, aka "extraneous messaging."

Affected products

• Nortel IP Softphone 2050: any version

Published 2007-10-23. Last modified 2026-06-16.