CVE-2007-4924 The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length....
MediumCVSS 5.0
EPSS 10.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ekiga | <= 2.0.9 | No fix listed |
| openh323 project openh323 | <= 2.2.3 | No fix listed |
References
- SUSE-SR:2007:021 vendor-advisory
- [ekiga-list] 20070917 [ANNOUNCE] Ekiga 2.0.10 released mailing-list patch
- openh323.cvs.sourceforge.net
- 41637 vdb-entry
- 27118 patch third-party-advisory vendor-advisory
- 27128 patch third-party-advisory vendor-advisory
- 27129 patch third-party-advisory vendor-advisory
- 27271 third-party-advisory
- 27524 third-party-advisory
- 28380 third-party-advisory
- MDKSA-2007:205 vendor-advisory
- RHSA-2007:0957 patch vendor-advisory
- www.s21sec.com
- 20071011 S21SEC-037-en: OPAL SIP Protocol Remote Denial of Service mailing-list
- 25955 vdb-entry
- 1018776 vdb-entry
- USN-562-1 vendor-advisory
- ADV-2007-3413 vdb-entry
- ADV-2007-3414 vdb-entry
- bugzilla.redhat.com
- oval:org.mitre.oval:def:11398 signature vdb-entry
- 9240 exploit