CVE:CVE-2007-4280
CNNVD:CNNVD-200708-154
Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。
Asterisk轻型通道驱动(chan_skinny)处理畸形用户请求时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。
如果Asterisk所接收到的CAPABILITIES_RES_MESSAGE报文中容量计数大于capabilities_res_message数组中项的总数的话，就可能出现分段错误。利用这个漏洞必须已认证的会话。
solution:Upgrade asterisk asterisk to a higher version than 1.4.9,and avoid the version (,1.4.9]; Upgrade asterisk asterisk_appliance_developer_kit to a higher version than 0.6.0,and avoid the version (,0.6.0]; Upgrade asterisk asterisknow to a higher version than beta_6,and avoid the version (,beta_6]; Upgrade asterisk s800i to a higher version than 1.0.2,and avoid the version (,1.0.2]