CVE-2007-1007 Other in n/a
Remote attackers can cause a crash or execute arbitrary code via format string vulnerabilities in GnomeMeeting's logging function.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-1007?
CVE-2007-1007 is a critical vulnerability in Redhat Enterprise Linux, published on 20 Feb 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.
Which versions are affected by CVE-2007-1007?
It affects 3 products.
Linux distribution packages (16)
gnomemeeting Red Hat:enterprise_linux:3::as | All versions | 0:0.96.0-5 |
gnomemeeting-debuginfo Red Hat:enterprise_linux:3::as | All versions | 0:0.96.0-5 |
gnomemeeting Red Hat:enterprise_linux:3::desktop | All versions | 0:0.96.0-5 |
gnomemeeting-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 0:0.96.0-5 |
gnomemeeting Red Hat:enterprise_linux:3::es | All versions | 0:0.96.0-5 |
gnomemeeting-debuginfo Red Hat:enterprise_linux:3::es | All versions | 0:0.96.0-5 |
gnomemeeting Red Hat:enterprise_linux:3::ws | All versions | 0:0.96.0-5 |
gnomemeeting-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 0:0.96.0-5 |
gnomemeeting Red Hat:enterprise_linux:4::as | All versions | 0:1.0.2-9 |
gnomemeeting-debuginfo Red Hat:enterprise_linux:4::as | All versions | 0:1.0.2-9 |
gnomemeeting Red Hat:enterprise_linux:4::desktop | All versions | 0:1.0.2-9 |
gnomemeeting-debuginfo Red Hat:enterprise_linux:4::desktop | All versions | 0:1.0.2-9 |
gnomemeeting Red Hat:enterprise_linux:4::es | All versions | 0:1.0.2-9 |
gnomemeeting-debuginfo Red Hat:enterprise_linux:4::es | All versions | 0:1.0.2-9 |
gnomemeeting Red Hat:enterprise_linux:4::ws | All versions | 0:1.0.2-9 |
gnomemeeting-debuginfo Red Hat:enterprise_linux:4::ws | All versions | 0:1.0.2-9 |
Products include Ekiga Ekiga, Redhat Enterprise Linux, Redhat Enterprise Linux Desktop.
How do I fix CVE-2007-1007?
Upgrade to a fixed version.
Is CVE-2007-1007 being exploited?
There is no known exploitation of CVE-2007-1007 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux
Sources
Also known as DSA-1262-1, GHSA-8g3j-8rp3-9ggj, RHSA-2007:0086.