CVE-2007-4897: ekiga Resource Management Errors

EPSS trend

Probability

10.90%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.90% on 19-09-2026

19-09-202619-10-2026

EPSS score

10.90%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoswindowsVerified
Ekiga 2.0.5 - 'GetHostAddress' Remote Denial of Service
Maturity: poc

References

24 links

secunia.com/advisories/28385Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-561-1Vendor AdvisoryX Refsource UBUNTU
bugzilla.redhat.com/show_bug.cgi?id=292831X Refsource CONFIRMREPORT
www.securityfocus.com/archive/1/479185/100/0/threadedMailing ListX Refsource BUGTRAQ
blog.s21sec.com/2007/09/sobre-la-vulnerabilidad-del-ekiga.htmlX Refsource MISC
www.securitytracker.com/id?1018683VDB EntryX Refsource SECTRACK
secunia.com/advisories/27150Third Party AdvisoryX Refsource SECUNIAVendor Advisory
securityreason.com/securityalert/3138Third Party AdvisoryX Refsource SREASON
openh323.cvs.sourceforge.net/openh323/…X Refsource MISC
marc.info?l=full-disclosure&m=118959114522339&w=2Mailing ListX Refsource FULLDISC

Show all 24 references

exchange.xforce.ibmcloud.com/vulnerabilities/36568VDB EntryX Refsource XF
secunia.com/advisories/27127Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/25642VDB EntryX Refsource BID
www.s21sec.com/avisos/s21sec-036-en.txtX Refsource MISC
secunia.com/advisories/27518Third Party AdvisoryX Refsource SECUNIAVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10928VDB EntrySignatureX Refsource OVAL
www.mandriva.com/security/advisories?name=MDKSA-2007:206Vendor AdvisoryX Refsource MANDRIVA
www.redhat.com/support/errata/RHSA-2007-0932.htmlVendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2007:0932Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0932.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-4897REPORT
www.cve.org/CVERecord?id=CVE-2007-4897Advisory
nvd.nist.gov/vuln/detail/CVE-2007-4897Advisory

Related vulnerabilities

CVE-2013-1864ekigaekiga+32.85%12y ago23-05-2014 14:00The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted PXML document containing a large number of nested entity references, aka a "billion laughs attack."CVE-2007-1006ekigaekiga3.67%19y ago20-02-2007 00:00Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.CVE-2007-1007debiangnomemeeting+57.08%19y ago20-02-2007 17:00Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.CVE-2007-4924ekigaekiga+410.68%19y ago08-10-2007 21:00The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."CVE-2012-5621ubuntuekiga+12.77%12y ago29-09-2014 22:00lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings.CVE-2011-1830ekigaekiga+10.79%7y ago22-04-2019 15:35Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.

All vulnerabilities inekiga

CVE-2007-4897: ekiga Resource Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References