CVE-2012-2415

CVE-2012-2415 describes a heap-based buffer overflow in the Skinny channel driver (chan_skinny.c) of Asterisk Open Source versions 1.6.2.x, 1.8.x, and 10.x. This vulnerability allows remote authenticated users to trigger a denial of service or potentially achieve other unspecified impacts by sending a series of KEYPAD_BUTTON_MESSAGE events. With a CVSS score of 6.5, it is considered a medium-severity vulnerability, requiring authentication (Au:S) but having low attack complexity (AC:L) and network accessibility (AV:N), with potential impacts on confidentiality, integrity, and availability (C:P/I:P/A:P). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.