PT-2007-2435 · Ekiga+1 · Ekiga+1

Published 2007-02-20 · Updated 2017-10-11 · CVE-2007-1006

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Ekiga versions prior to 2.0.5

Description: The issue is related to multiple format string vulnerabilities in the gm main window flash message function. This could allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.

Recommendations: For versions prior to 2.0.5, update to version 2.0.5 or later to resolve the issue.

Fix

DoS

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2007-1006

RHSA-2007:0087

RHSA-2007_0087

Affected Products

Ekiga

Red Hat

References · 27

• http://redhat.com/support/errata/RHSA-2007-0087.html · Vendor Advisory
• http://fedoranews.org/cms/node/2682 · Vendor Advisory
• http://secunia.com/advisories/24271 · Vendor Advisory
• http://secunia.com/advisories/24194 · Vendor Advisory
• http://fedoranews.org/cms/node/2683 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2007:044 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200703-25.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1006 · Security Note
• http://secunia.com/advisories/24680 · Vendor Advisory
• http://secunia.com/advisories/24229 · Vendor Advisory
• http://vupen.com/english/advisories/2007/0655 · Vendor Advisory
• http://ubuntu.com/usn/usn-426-1 · Vendor Advisory
• http://secunia.com/advisories/24379 · Vendor Advisory
• http://debian.org/security/2007/dsa-1262 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_9_sr.html · Vendor Advisory