Lucene search

K
ubuntuUbuntuUSN-434-1
HistoryMar 09, 2007 - 12:00 a.m.

Ekiga vulnerability

2007-03-0900:00:00
ubuntu.com
35

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.2%

Releases

  • Ubuntu 6.10
  • Ubuntu 6.06
  • Ubuntu 5.10

Details

It was discovered that Ekiga had format string vulnerabilities beyond
those fixed in USN-426-1. If a user was running Ekiga and listening for
incoming calls, a remote attacker could send a crafted call request, and
execute arbitrary code with the user’s privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchekiga< 2.0.3-0ubuntu3.2UNKNOWN
Ubuntu6.06noarchekiga< 2.0.1-0ubuntu6.2UNKNOWN
Ubuntu5.10noarchgnomemeeting< 1.2.2-1ubuntu1.2UNKNOWN

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.021 Low

EPSS

Percentile

89.2%