CVE-2007-1006

Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.

🔗 References (46)

• secalert@redhathttp://fedoranews.org/cms/node/2682
• secalert@redhathttp://fedoranews.org/cms/node/2683
• secalert@redhathttp://labs.musecurity.com/advisories/MU-200702-01.txt
• secalert@redhathttp://mail.gnome.org/archives/ekiga-list/2007-February/msg00060.html
• secalert@redhathttp://secunia.com/advisories/24194
• secalert@redhathttp://secunia.com/advisories/24228
• secalert@redhathttp://secunia.com/advisories/24229
• secalert@redhathttp://secunia.com/advisories/24271
• secalert@redhathttp://secunia.com/advisories/24379
• secalert@redhathttp://secunia.com/advisories/24680
• secalert@redhathttp://secunia.com/advisories/25119
• secalert@redhathttp://security.gentoo.org/glsa/glsa-200703-25.xml
• secalert@redhathttp://www.debian.org/security/2007/dsa-1262
• secalert@redhathttp://www.ekiga.org/index.php?rub=10&archive=1
• secalert@redhathttp://www.mandriva.com/security/advisories?name=MDKSA-2007:044