Package(s):	asterisk	CVE #(s):	CVE-2012-1183 CVE-2012-1184
Created:	March 28, 2012	Updated:	May 4, 2012
Description:	The asterisk telephony system prior to version 1.8.10.1 suffers from a stack overrun in milliwatt_generate() and a buffer overflow vulnerability in ast_parse_digest(). Either could be exploited to execute arbitrary code.
Alerts:	Fedora FEDORA-2012-6612 asterisk 2012-05-03 Debian DSA-2460-1 asterisk 2012-04-25 Fedora FEDORA-2012-4259 asterisk 2012-03-31 Fedora FEDORA-2012-4318 asterisk 2012-03-31 Gentoo 201203-21 asterisk 2012-03-28

---

to post comments