PT-2007-2435 · Ekiga+1 · Ekiga+1

Publicado 2007-02-20 · Atualizado 2017-10-11 · CVE-2007-1006

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Ekiga versions prior to 2.0.5

Description: The issue is related to multiple format string vulnerabilities in the gm main window flash message function. This could allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.

Recommendations: For versions prior to 2.0.5, update to version 2.0.5 or later to resolve the issue.

Correção

DoS

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2007-1006

RHSA-2007:0087

RHSA-2007_0087

Produtos afetados

Ekiga

Red Hat

Referências · 27

• https://access.redhat.com/security/cve/CVE-2007-1006 · Nota
• http://redhat.com/support/errata/RHSA-2007-0087.html · Aviso do Fabricante
• http://fedoranews.org/cms/node/2682 · Aviso do Fabricante
• http://mail.gnome.org/archives/ekiga-list/2007-February/msg00060.html · Nota
• http://secunia.com/advisories/24271 · Aviso do Fabricante
• http://secunia.com/advisories/24194 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2007:0087 · Nota
• http://fedoranews.org/cms/node/2683 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2007:044 · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-200703-25.xml · Aviso do Fabricante
• http://osvdb.org/31939 · Nota
• http://labs.musecurity.com/advisories/MU-200702-01.txt · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11642 · Nota
• http://ekiga.org/index.php?rub=10&archive=1 · Nota
• https://access.redhat.com/security/cve/CVE-2007-0999 · Nota