pwlib security update

CentOS Errata and Security Advisory CESA-2007:0932 Updated pwlib packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PWLib is a library used to support...

RHEL 5 : pwlib (RHSA-2007:0932)

Updated pwlib packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PWLib is a library used to support cross-platform applications. In Red Hat Enterprise Linux 5, th...

OpenH323 Opal SIP协议远程拒绝服务漏洞

Openh323是为开发使用H.323协议在IP网上进行多媒体通信的应用程序而专门设计的全功能协议栈。 Openh323处理SIP协议头字段数据存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 Ekiga是基于Openh323协议实现，Ekiga使用的OPAL库在执行对SIP协议头字段'Content-Length'数据处理时缺少充分的输入验证，这个漏洞可用于写'\0'字节到攻击者控制的地址而使应用程序崩溃。 OpenH323 OpenH323 Opal 2.2.4 Ekiga Ekiga 2.0.9 Ekiga Ekiga 2.0.5 Ekiga Ekiga 2.0.4...

Design/Logic Flaw

The Open Phone Abstraction Library opal, as used by 1 Ekiga before 2.0.10 and 2 OpenH323 before 2.2.4, allows remote attackers to cause a denial of service crash via an invalid Content-Length header field in Session Initiation Protocol SIP packets, which causes a \0 byte to be written to an...

CVE-2007-4924

The CVE-2007-4924 affects the Open Phone Abstraction Library (opal) used by Ekiga (before 2.0.10) and OpenH323 (before 2.2.4). A flaw in how opal handles certain SIP packets (invalid Content-Length) allows a remote attacker to crash the vulnerable application, yielding a denial-of-service conditi...

ekiga remote crash caused by insufficient input validation

The Open Phone Abstraction Library opal, as used by 1 Ekiga before 2.0.10 and 2 OpenH323 before 2.2.4, allows remote attackers to cause a denial of service crash via an invalid Content-Length header field in Session Initiation Protocol SIP packets, which causes a \0 byte to be written to an...

Moderate: Red Hat Security Advisory: opal security update

Updated opal packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Open Phone Abstraction Library opal is implementation of various telephony and video communication...

ekiga GetHostAddress remote DoS

pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service application crash via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the...

Moderate: Red Hat Security Advisory: pwlib security update

Updated pwlib packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PWLib is a library used to support cross-platform applications. In Red Hat Enterprise Linux 5, th...

CVE-2007-4897

pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service application crash via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the...

Code injection

pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service application crash via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the...

CVE-2007-4897

pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service application crash via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the...

CVE-2007-4897

pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service application crash via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the...

CVE-2007-4897

PWLib contains a memory-management flaw that can cause a remote denial-of-service in Ekiga 2.0.5 and potentially other PWLib-linked apps by sending a long argument to PString::vsprintf. Public PoCs/exploits (e.g., Ekiga GetHostAddress DoS) exist, using a crafted SIP/INVITE payload over UDP to cra...

Ekiga VoIP/video application DoS

SIPURL::GetHostAddress invalid memory allocation...

S21SEC-036-EN Ekiga <= 2.0.5 Denial of service

S21Sec Advisory - Title: Ekiga Denial of Service ID: S21SEC-036-en Severity: Medium - Remote DoS History: 14.May.2007 Vulnerability discovered 09.Jul.2007 Vendor contacted Scope: Application Denial of Service Platforms: Any Author: Jose Miguel Esparza [email protected] URL:...

GLSA-200703-25 : Ekiga: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200703-25 Ekiga: Format string vulnerability Mu Security has discovered that Ekiga fails to implement formatted printing correctly. Impact : An attacker could exploit this vulnerability to crash Ekiga and potentially execute...

Ekiga: Format string vulnerability

Background Ekiga is an open source VoIP and video conferencing application. Description Mu Security has discovered that Ekiga fails to implement formatted printing correctly. Impact An attacker could exploit this vulnerability to crash Ekiga and potentially execute arbitrary code by sending a...

Ekiga format string flaw

Multiple format string vulnerabilities in the gmmainwindowflashmessage function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet...

security flaw

Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006...