Design/Logic Flaw

The Open Phone Abstraction Library opal, as used by 1 Ekiga before 2.0.10 and 2 OpenH323 before 2.2.4, allows remote attackers to cause a denial of service crash via an invalid Content-Length header field in Session Initiation Protocol SIP packets, which causes a \0 byte to be written to an...

CVE-2007-4924

The Open Phone Abstraction Library opal, as used by 1 Ekiga before 2.0.10 and 2 OpenH323 before 2.2.4, allows remote attackers to cause a denial of service crash via an invalid Content-Length header field in Session Initiation Protocol SIP packets, which causes a \0 byte to be written to an...

CVE-2007-4924

The CVE-2007-4924 affects the Open Phone Abstraction Library (opal) used by Ekiga (before 2.0.10) and OpenH323 (before 2.2.4). A flaw in how opal handles certain SIP packets (invalid Content-Length) allows a remote attacker to crash the vulnerable application, yielding a denial-of-service conditi...

ekiga remote crash caused by insufficient input validation

The Open Phone Abstraction Library opal, as used by 1 Ekiga before 2.0.10 and 2 OpenH323 before 2.2.4, allows remote attackers to cause a denial of service crash via an invalid Content-Length header field in Session Initiation Protocol SIP packets, which causes a \0 byte to be written to an...

Moderate: Red Hat Security Advisory: opal security update

Updated opal packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Open Phone Abstraction Library opal is implementation of various telephony and video communication...