Code injection

pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service application crash via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the...

CVE-2007-4897

pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service application crash via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the...

CVE-2007-4897

PWLib contains a memory-management flaw that can cause a remote denial-of-service in Ekiga 2.0.5 and potentially other PWLib-linked apps by sending a long argument to PString::vsprintf. Public PoCs/exploits (e.g., Ekiga GetHostAddress DoS) exist, using a crafted SIP/INVITE payload over UDP to cra...

Ekiga VoIP/video application DoS

SIPURL::GetHostAddress invalid memory allocation...