CVEブラウザに戻る

CVE-2007-0999

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.1140%

EPSS Percentile24.94th

Published2007年3月10日

Last Modified2026年4月23日

Vulnerability Description

Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006.

Affected Platforms (CPE)

📦

Gnome

Ekiga

<= 2.0.3

References & Advisories

🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2007:058

🔗 http://www.redhat.com/support/errata/RHSA-2007-0087.html

🔗 http://www.ubuntu.com/usn/usn-434-1

🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10944

🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2007:058

🔗 http://www.redhat.com/support/errata/RHSA-2007-0087.html

🔗 http://www.ubuntu.com/usn/usn-434-1

🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10944

関連する脆弱性情報

CVE-2007-100610.0

Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause...

CVE-2011-18305.7

Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.

CVE-2007-48975.0

pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash...

CVE-2007-49245.0

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attacke...