CVE-2007-1006 Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted...
HighCVSS 10.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ekiga | <= 2.0.4 | No fix listed |
References
- FEDORA-2007-262 vendor-advisory
- FEDORA-2007-263 vendor-advisory
- labs.musecurity.com
- [Ekiga-list] 20070213 Ekiga 2.0.5 available mailing-list
- 24194 third-party-advisory vendor-advisory
- 24228 third-party-advisory vendor-advisory
- 24229 third-party-advisory vendor-advisory
- 24271 third-party-advisory vendor-advisory
- 24379 third-party-advisory vendor-advisory
- 24680 third-party-advisory vendor-advisory
- 25119 third-party-advisory vendor-advisory
- GLSA-200703-25 vendor-advisory
- DSA-1262 vendor-advisory
- www.ekiga.org
- MDKSA-2007:044 vendor-advisory
- SUSE-SR:2007:009 vendor-advisory
- 31939 vdb-entry
- RHSA-2007:0087 vendor-advisory
- 22613 vdb-entry
- 1017673 vdb-entry
- USN-426-1 vendor-advisory
- ADV-2007-0655 vdb-entry vendor-advisory
- oval:org.mitre.oval:def:11642 signature vdb-entry