CVE-2007-1006

CRITICAL 10.0CVE-2007-1006 · Published 20/02/2007 · updated 16/06/2026

In short

CVE-2007-1006 is a CRITICAL (CVSS 10.0) vulnerability affecting ekiga (ekiga).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ekiga ekiga	`≤ 2.0.4`	No fix yet

Description

Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.

References

fedoranews.org/cms/node/2682
fedoranews.org/cms/node/2683
labs.musecurity.com/advisories/MU-200702-01.txt
mail.gnome.org/archives/ekiga-list/2007-February/msg00060.html
secunia.com/advisories/24194 · Vendor Advisory
secunia.com/advisories/24228 · Vendor Advisory
secunia.com/advisories/24229 · Vendor Advisory
secunia.com/advisories/24271 · Vendor Advisory
secunia.com/advisories/24379 · Vendor Advisory
secunia.com/advisories/24680 · Vendor Advisory
secunia.com/advisories/25119 · Vendor Advisory
security.gentoo.org/glsa/glsa-200703-25.xml
debian.org/security/2007/dsa-1262
ekiga.org/index.php
mandriva.com/security/advisories

More vulnerabilities in ekiga

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free