CVE-2009-3704: Zoiper

Medium severity, CVSS 5.0. EPSS: 8.1% chance of exploitation in the next 30 days.

ZoIPer 2.22, and possibly other versions before 2.24 Library 5324, allows remote attackers to cause a denial of service (crash) via a SIP INVITE request with an empty Call-Info header.

Affected products

• Zoiper Zoiper: up to and including 2.22; version 2.0 only; version 2.10 only; version 2.11 only

Published 2009-10-16. Last modified 2026-06-16.