This makes it doable for unauthenticated attackers to inject a PHP Object. The additional existence of a POP chain allows attackers to execute code remotely, also to delete arbitrary files. This vulnerability is due to inappropriate parsing of SIP messages. An attacker could exploit this vulnerability by sending a crafted SIP message to an affecte