This makes it doable for unauthenticated attackers to inject a PHP Object. The additional existence of a POP chain allows attackers to execute code remotely, also to delete arbitrary files. This vulnerability is due to inappropriate parsing of SIP messages. An attacker could exploit this vulnerabil