CVE-2007-1007 Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is....
HighCVSS 10.0
EPSS 7.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ekiga | = 1.0.2 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux | = 4.0 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 4.0 | No fix listed |
References
- bugzilla.redhat.com
- 32083 vdb-entry
- 24185 patch third-party-advisory vendor-advisory
- 24271 third-party-advisory
- 24284 third-party-advisory
- 24379 third-party-advisory
- 25119 third-party-advisory
- DSA-1262 vendor-advisory
- MDKSA-2007:045 vendor-advisory
- SUSE-SR:2007:009 vendor-advisory
- RHSA-2007:0086 patch vendor-advisory
- USN-426-1 vendor-advisory
- oval:org.mitre.oval:def:11776 signature vdb-entry