Asterisk is prone to an overflow condition. The Skinny Channel Drive fails to properly sanitize user-supplied input resulting in a heap-based buffer overflow. With a specially crafted KEYPAD_BUTTON_MESSAGE event, a remote attacker can potentially execute arbitrary code.

Upgrade to version 1.6.2.24, 1.8.11.1 or 10.3.1 or higher for Open Source, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1026962
• CVE ID: 2012-2415 (see also: NVD)
• Secunia Advisory ID: 48891 48941 49536
• Related OSVDB ID: 81454 81456
• Vendor Specific Advisory URL: http://downloads.asterisk.org/pub/security/AST-2012-005.html
• Packet Storm: http://packetstormsecurity.org/files/112116/Asterisk-Project-Security-Advisory-AST-2012-005.html
• Mail List Post: http://seclists.org/bugtraq/2012/Apr/179
• Vendor Specific News/Changelog Entry: http://www.debian.org/security/2012/dsa-2460
  http://www.gentoo.org/security/en/glsa/glsa-201206-05.xml

• Russell Bryant