Red Hat Security AdvisoryRHSA-2007:0087
ekiga security update
Released 2007-03-14 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 5 client) ekiga-2.0.2-7.0.2, ekiga-2.0.2-7.0.2.i386
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) ekiga-2.0.2-7.0.2, ekiga-2.0.2-7.0.2.i386
Fixes 2 records
Priority MEDIUM 49
Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03667 · Published 2007-02-20 · Fixed CWE-134
Priority MEDIUM 46
Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03468 · Published 2007-03-10 · Fixed
