CVE-2007-4924: ekiga Improper Input Validation

EPSS trend

Probability

10.68%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 10.68% on 19-09-2026

19-09-202619-10-2026

EPSS score

10.68%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedoswindowsVerified
OpenH323 Opal SIP Protocol - Remote Denial of Service
Maturity: poc

References

28 links

secunia.com/advisories/27118Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/27271Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1018776VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/25955VDB EntryX Refsource BID
secunia.com/advisories/27129Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:205Vendor AdvisoryX Refsource MANDRIVA
bugzilla.redhat.com/show_bug.cgi?id=296371X Refsource CONFIRMREPORT
secunia.com/advisories/28380Third Party AdvisoryX Refsource SECUNIA
osvdb.org/41637VDB EntryX Refsource OSVDB
www.redhat.com/support/errata/RHSA-2007-0957.htmlVendor AdvisoryX Refsource REDHATPatch

Show all 28 references

mail.gnome.org/archives/ekiga-list/2007-September/msg00103.htmlMailing ListX Refsource MLISTPatch
www.ubuntu.com/usn/usn-562-1Vendor AdvisoryX Refsource UBUNTU
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11398VDB EntrySignatureX Refsource OVAL
www.s21sec.com/avisos/s21sec-037-en.txtX Refsource MISC
www.securityfocus.com/archive/1/482120/30/4500/threadedMailing ListX Refsource BUGTRAQ
lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.htmlVendor AdvisoryX Refsource SUSE
www.vupen.com/english/advisories/2007/3413VDB EntryX Refsource VUPEN
www.vupen.com/english/advisories/2007/3414VDB EntryX Refsource VUPEN
www.exploit-db.com/exploits/9240ExploitX Refsource EXPLOIT DB
secunia.com/advisories/27524Third Party AdvisoryX Refsource SECUNIA
openh323.cvs.sourceforge.net/openh323/opal/src/sip/sippdu.cxx?r1=2.83.2.19&r2=2.83.2.20X Refsource CONFIRM
secunia.com/advisories/27128Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
access.redhat.com/errata/RHSA-2007:0957Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0957.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-4924REPORT
www.cve.org/CVERecord?id=CVE-2007-4924Advisory
nvd.nist.gov/vuln/detail/CVE-2007-4924Advisory

Related vulnerabilities

CVE-2013-1864ekigaekiga+32.85%12y ago23-05-2014 14:00The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted PXML document containing a large number of nested entity references, aka a "billion laughs attack."CVE-2007-1006ekigaekiga3.67%19y ago20-02-2007 00:00Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.CVE-2007-1007debiangnomemeeting+57.08%19y ago20-02-2007 17:00Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.CVE-2007-4897debianpwlib+510.90%19y ago14-09-2007 18:00pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the SIPURL::GetHostAddress function in Ekiga (formerly GnomeMeeting).CVE-2012-5621ubuntuekiga+12.77%12y ago29-09-2014 22:00lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings.CVE-2011-1830ekigaekiga+10.79%7y ago22-04-2019 15:35Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.

All vulnerabilities inekiga openh323

CVE-2007-4924: ekiga Improper Input Validation

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References