CVE-2007-1007

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-20 · updated 2026-06-16

Description

Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.

Affected products

Gnome Ekiga: 1.0.2
Red Hat Enterprise Linux: 3.0, 4.0
RedHat Enterprise Linux Desktop: 3.0, 4.0

References

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=229266
http://osvdb.org/32083
http://secunia.com/advisories/24185
http://secunia.com/advisories/24271
http://secunia.com/advisories/24284
http://secunia.com/advisories/24379
http://secunia.com/advisories/25119
http://www.debian.org/security/2007/dsa-1262
http://www.mandriva.com/security/advisories?name=MDKSA-2007:045
http://www.novell.com/linux/security/advisories/2007_9_sr.html
http://www.redhat.com/support/errata/RHSA-2007-0086.html

Get alerted when CVE-2007-1007 or the next vulnerability affects your stack