CVE-2012-5621 lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings...
MediumCVSS 5.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ekiga | <= 3.9.90 | No fix listed |
References
- ftp.gnome.org
- [oss-security] 20121203 Re: CVE Request -- Ekiga (x < 4.0.0): DoS (crash) after receiving call from other party with not UTF-8 valid name mailing-list
- 56790 vdb-entry
- blogs.oracle.com
- bugzilla.redhat.com patch
- ekiga-utf8-dos(80640) vdb-entry
- git.gnome.org
- FEDORA-2013-2998 vendor-advisory