NVD

Id
56987  
Name
CVE-2007-4897  
Description
pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argument to the PString::vsprintf function, related to a "memory management flaw". NOTE: this issue was originally reported as being in the SIPURL::GetHostAddress function in Ekiga (formerly GnomeMeeting).  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-09-14  
Modified Date
2011-06-13  
Seq
2007-4897  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290884 56987 CVE-2007-4897 http://blog.s21sec.com/2007/09/sobre-la-vulnerabilidad-del-ekiga.html  View
290885 56987 CVE-2007-4897 20070912 S21SEC-036-EN Ekiga <= 2.0.5 Denial of service  View
290886 56987 CVE-2007-4897 http://openh323.cvs.sourceforge.net/openh323/opal/src/sip/sipcon.cxx?r1=2.120.2.25&r2=2.120.2.26&pathrev=v2_2_9  View
290887 56987 CVE-2007-4897 oval:org.mitre.oval:def:10928  View
290888 56987 CVE-2007-4897 3138  View
290889 56987 CVE-2007-4897 MDKSA-2007:206  View
290890 56987 CVE-2007-4897 RHSA-2007:0932  View
290891 56987 CVE-2007-4897 http://www.s21sec.com/avisos/s21sec-036-en.txt  View
290892 56987 CVE-2007-4897 20070912 S21SEC-036-EN Ekiga <= 2.0.5 Denial of service  View
290893 56987 CVE-2007-4897 25642  View
290894 56987 CVE-2007-4897 1018683  View
290895 56987 CVE-2007-4897 USN-561-1  View
290896 56987 CVE-2007-4897 ekiga-sipurlgethostaddress-dos(36568)  View
290897 56987 CVE-2007-4897 https://bugzilla.redhat.com/show_bug.cgi?id=292831  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52079 JVNDB-2007-000742 Ekiga の pwlib における SIPURL::GetHostAddress() 関数のサービス運用妨害 (DoS) の脆弱性 Ekiga で使用されている pwlib には、PString::vsprintf() 関数において、引数の取り扱いに不備があり、アプリケーションがサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-4897 28252 CVE-2007-4897 56987 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000742.html 2007-09-14 2007-10-16 View