Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2007-4924

ekiga remote crash caused by insufficient input validation

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

CVSS 2.0 · 5.0 Medium EPSS 10.7% KEV · Not listed
Vendors
Ekiga Openh323 Project Redhat
Products
Ekiga Openh323 Enterprise Linux
CVE-2007-1007

security flaw

Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.

CVSS 2.0 · 10.0 Critical EPSS 7.1% KEV · Not listed
Vendors
Ekiga Redhat
Products
Ekiga Enterprise Linux Enterprise Linux Desktop
CVE-2007-4897

ekiga GetHostAddress remote DoS

pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the SIPURL::GetHostAddress function in Ekiga (formerly GnomeMeeting).

CVSS 2.0 · 5.0 Medium EPSS 10.9% KEV · Not listed
Vendors
Ekiga Redhat
Products
Ekiga Enterprise Linux
CVE-2007-1006

Ekiga format string flaw

Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.

CVSS 2.0 · 10.0 Critical EPSS 3.7% KEV · Not listed
Vendors
Ekiga Redhat
Products
Ekiga Enterprise Linux
CVE-2012-5621

ekiga: DoS (crash) after receiving call from other party with not UTF-8 valid name

lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings.

CVSS 2.0 · 5.0 Medium EPSS 2.8% KEV · Not listed
Vendors
Ekiga
Products
Ekiga
CVE-2013-1864

ptlib: denial of service processing certain XML documents

The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted PXML document containing a large number of nested entity references, aka a "billion laughs attack."

CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed
Vendors
Ekiga Opalvoip Suse
Products
Ekiga Portable Tool Library Suse Linux Enterprise Desktop and 1 more
CVE-2011-1830

Ekiga attempts to dlopen /tmp/ekiga_test.so

Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.

CVSS 3.0 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Ekiga
Products
Ekiga