CVE-2007-1006: ekiga

EPSS trend

Probability

3.67%

Chance of exploitation in the next 30 days

Percentile

90%

Versus all other CVEs

30-day change

0.00 pp

From 3.67% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.67%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

23 links

www.mandriva.com/security/advisories?name=MDKSA-2007:044Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/25119Third Party AdvisoryX Refsource SECUNIAVendor Advisory
fedoranews.org/cms/node/2682Vendor AdvisoryX Refsource FEDORA
mail.gnome.org/archives/ekiga-list/2007-February/msg00060.htmlMailing ListX Refsource MLIST
labs.musecurity.com/advisories/MU-200702-01.txtX Refsource MISC
www.osvdb.org/31939VDB EntryX Refsource OSVDB
www.securityfocus.com/bid/22613VDB EntryX Refsource BID
secunia.com/advisories/24271Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/24379Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2007_9_sr.htmlVendor AdvisoryX Refsource SUSE

Show all 23 references

security.gentoo.org/glsa/glsa-200703-25.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/24228Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2007/dsa-1262Vendor AdvisoryX Refsource DEBIAN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11642VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/24680Third Party AdvisoryX Refsource SECUNIAVendor Advisory
fedoranews.org/cms/node/2683Vendor AdvisoryX Refsource FEDORA
www.redhat.com/support/errata/RHSA-2007-0087.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/24229Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ekiga.org/index.php?rub=10&archive=1X Refsource CONFIRM
secunia.com/advisories/24194Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securitytracker.com/id?1017673VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2007/0655VDB EntryX Refsource VUPENVendor Advisory
www.ubuntu.com/usn/usn-426-1Vendor AdvisoryX Refsource UBUNTU

Related vulnerabilities

CVE-2013-1864ekigaekiga+32.85%12y ago23-05-2014 14:00The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted PXML document containing a large number of nested entity references, aka a "billion laughs attack."CVE-2007-1007debiangnomemeeting+57.08%19y ago20-02-2007 17:00Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.CVE-2007-4924ekigaekiga+410.68%19y ago08-10-2007 21:00The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."CVE-2007-4897debianpwlib+510.90%19y ago14-09-2007 18:00pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the SIPURL::GetHostAddress function in Ekiga (formerly GnomeMeeting).CVE-2012-5621ubuntuekiga+12.77%12y ago29-09-2014 22:00lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings.CVE-2011-1830ekigaekiga+10.79%7y ago22-04-2019 15:35Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.

All vulnerabilities inekiga

CVE-2007-1006: ekiga

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References