CVE-2012-1183

Stack-based buffer overflow in the milliwatt_generate function in the
Miliwatt application in Asterisk 1.4.x before 1.4.44, 1.6.x before
1.6.2.23, 1.8.x before 1.8.10.1, and 10.x before 10.2.1, when the o option
is used and the internal_timing option is off, allows remote attackers to
cause a denial of service (application crash) via a large number of samples
in an audio packet.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=664411&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=804038&gt;