CVE-2007-1006

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-20 · updated 2026-06-16
Weakness: CWE-134

Description

Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.

Affected products

Gnome Ekiga: through 2.0.4

References

http://fedoranews.org/cms/node/2682
http://fedoranews.org/cms/node/2683
http://labs.musecurity.com/advisories/MU-200702-01.txt
http://mail.gnome.org/archives/ekiga-list/2007-February/msg00060.html
http://secunia.com/advisories/24194
http://secunia.com/advisories/24228
http://secunia.com/advisories/24229
http://secunia.com/advisories/24271
http://secunia.com/advisories/24379
http://secunia.com/advisories/24680
http://secunia.com/advisories/25119
http://security.gentoo.org/glsa/glsa-200703-25.xml

Get alerted when CVE-2007-1006 or the next vulnerability affects your stack