CVE-2007-1006 Memory corruption in n/a

What is CVE-2007-1006?

CVE-2007-1006 is a critical memory corruption vulnerability in n/a, published on 20 Feb 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.

Weakness: CWE-134

Which versions are affected by CVE-2007-1006?

It affects 1 product.

Products include Ekiga Ekiga.

How do I fix CVE-2007-1006?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2007-1006 being exploited?

There is no known exploitation of CVE-2007-1006 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2007-1007 Other in n/a Critical 10.0
• CVE-2011-1830 Ekiga attempts to dlopen /tmp/ekiga_test.so Medium 5.7
• CVE-2012-5621 Denial of service in n/a Medium 5.0
• CVE-2007-4924 Denial of service in n/a Medium 5.0
• CVE-2007-4897 Denial of service in n/a Medium 5.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-vqrh-pw2c-gfrh.