Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.

Updated ekiga packages that fix security issues are now available for Red Hat Enterprise Linux 5.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Ekiga is a tool to communicate with video and audio over the Internet.

Format string flaws were found in the way Ekiga processes certain messages. If a user is running Ekiga, a remote attacker who can connect to Ekiga could trigger this flaw and potentially execute arbitrary code with the privileges of the user. (CVE-2007-0999, CVE-2007-1006)

Users of Ekiga should upgrade to these updated packages which contain a backported patch to correct this issue.

Mu Security discovered a format string vulnerability in Ekiga. If a user was running Ekiga and listening for incoming calls, a remote attacker could send a crafted call request, and execute arbitrary code with the user's privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes format string problems in ekiga. (CVE-2007-1006)

The remote host is affected by the vulnerability described in GLSA-200703-25 (Ekiga: Format string vulnerability)

    Mu Security has discovered that Ekiga fails to implement formatted     printing correctly.
  Impact :

    An attacker could exploit this vulnerability to crash Ekiga and     potentially execute arbitrary code by sending a specially crafted Q.931     SETUP packet to a victim.
  Workaround :

    There is no known workaround at this time.

A format string flaw was found in the way Ekiga processes certain messages. If a user is running Ekiga, a remote attacker who can connect to Ekiga could trigger this flaw and potentially execute arbitrary code with the privileges of the user.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A format string flaw was found in the way Ekiga processes certain messages form remote clients. This flaw could potentially allow a remote attacker to execute arbitrary code as the user running Ekiga.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A format string flaw was discovered in how ekiga processes certain messages, which could permit a remote attacker that can connect to ekiga to potentially execute arbitrary code with the privileges of the user running ekiga.

Updated package have been patched to correct this issue.

ID	Name	Product	Family	Severity
63840	RHEL 5 : ekiga (RHSA-2007:0087)	Nessus	Red Hat Local Security Checks	critical
28019	Ubuntu 5.10 / 6.06 LTS / 6.10 : ekiga, gnomemeeting vulnerabilities (USN-426-1)	Nessus	Ubuntu Local Security Checks	critical
27203	openSUSE 10 Security Update : ekiga (ekiga-3023)	Nessus	SuSE Local Security Checks	critical
24930	GLSA-200703-25 : Ekiga: Format string vulnerability	Nessus	Gentoo Local Security Checks	critical
24694	Fedora Core 6 : ekiga-2.0.5-2.fc6 (2007-263)	Nessus	Fedora Local Security Checks	critical
24693	Fedora Core 5 : ekiga-2.0.1-4 (2007-262)	Nessus	Fedora Local Security Checks	critical
24687	Mandrake Linux Security Advisory : ekiga (MDKSA-2007:044)	Nessus	Mandriva Local Security Checks	critical

Detections

Analytics

CVE-2007-1006

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical