CVE Feed

    Dashboard / CVE / CVE-2008-5180

    CVE-2008-5180

    Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory consumption) via a large number of SIP INVITE requests, which trigger the creation of many sessions.

    Published:Nov 20, 2008
    Last Modified:Apr 23, 2026
    EPS:Nov 20, 2008
    EPSS Score:0.76735
    CVSS Score:5.3

    Affected Products

    Vendor
    Microsoft
    Product
    Office Communicator

    Exploits

    http://www.exploit-db.com/exploits/12079https://www.exploit-db.com/exploits/7262http://www.exploit-db.com/exploits/12079https://www.exploit-db.com/exploits/7262https://www.exploit-db.com/exploits/7262https://www.exploit-db.com/exploits/12079

    Related CVEs

    CVE-2013-1302 (CVSS 9.3) — Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle obj…
    CVE-2012-2520 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 200…
    CVE-2012-1858 (CVSS 4.3) — The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2…
    CVE-2008-5179 (CVSS 5) — Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Li…
    CVE-2008-5181 (CVSS 5) — Microsoft Communicator allows remote attackers to cause a denial of service (application or device outage) via…
    CVE-2008-3068 (CVSS 7.5) — Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, perf…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High