CVE:CVE-2008-2119
CNNVD:CNNVD-200806-074
Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。
Asterisk在以pedantic模式处理SIP时，Asterisk将From头的值传送给了ast_uri_decode函数进行解码。由于没有检查From值是否为空，因此上述情况可能导致例程崩溃。
solution:Upgrade asterisk asterisk_business_edition to a higher version than b2.5.2,b.1.3.2,b.1.3.3,b.2.2.0,b.2.2.1,b.2.3.1,b.2.3.2,b.2.3.3,b.2.3.4,b.2.5.0,b2.5.1,and avoid the version (,b2.5.2],b.1.3.2,b.1.3.3,b.2.2.0,b.2.2.1,b.2.3.1,b.2.3.2,b.2.3.3,b.2.3.4,b.2.5.0,b2.5.1; Upgrade asterisk open_source to a higher version than 1.2.28,1.0,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.11,1.0.11.1,1.0.12,1.2.0,1.2.0beta1,1.2.0beta2,1.2.1,1.2.2,1.2.10,1.2.11,1.2.12,1.2.12.1,1.2.13,1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.21.1,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26,1.2.26.1,1.2.26.2,1.2.27,and avoid the version (,1.2.28],1.0,1.0.0,1.0.1,1.0.2,1.0.3,1.0.4,1.0.5,1.0.6,1.0.7,1.0.8,1.0.9,1.0.11,1.0.11.1,1.0.12,1.2.0,1.2.0beta1,1.2.0beta2,1.2.1,1.2.2,1.2.10,1.2.11,1.2.12,1.2.12.1,1.2.13,1.2.14,1.2.15,1.2.16,1.2.17,1.2.18,1.2.19,1.2.20,1.2.21,1.2.21.1,1.2.22,1.2.23,1.2.24,1.2.25,1.2.26,1.2.26.1,1.2.26.2,1.2.27