snomControl.swf in the central phone server for the Snom 320 SIP Phone allows remote attackers to cause a denial of service (application crash and corruption of call logs) via a \'); (double quote quote close parenthesis semicolon) sequence in the \Call a number\ field.