CVE-2007-4924
CVE-2007-4924 is a medium-severity vulnerability in Ekiga with a CVSS 2.0 base score of 5.0. Its EPSS exploit-prediction score of 11% places it in the 95th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-20.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 11% (95th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-20
- Affected product: Ekiga
- Published:
- Last modified:
Description
The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."
Frequently asked questions
- What is CVE-2007-4924?
- The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."
- How severe is CVE-2007-4924?
- CVE-2007-4924 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2007-4924 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 11% (95th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2007-4924?
- CVE-2007-4924 primarily affects Ekiga. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2007-4924?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2007-4924 published?
- CVE-2007-4924 was published on 2007-10-08 and last updated on 2026-06-16.
References
- http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
- http://mail.gnome.org/archives/ekiga-list/2007-September/msg00103.html
- http://openh323.cvs.sourceforge.net/openh323/opal/src/sip/sippdu.cxx?r1=2.83.2.19&r2=2.83.2.20
- http://osvdb.org/41637
- http://secunia.com/advisories/27118
- http://secunia.com/advisories/27128
- http://secunia.com/advisories/27129
- http://secunia.com/advisories/27271
- http://secunia.com/advisories/27524
- http://secunia.com/advisories/28380
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:205
- http://www.redhat.com/support/errata/RHSA-2007-0957.html
- http://www.s21sec.com/avisos/s21sec-037-en.txt
- http://www.securityfocus.com/archive/1/482120/30/4500/threaded
- http://www.securityfocus.com/bid/25955
- http://www.securitytracker.com/id?1018776
- http://www.ubuntu.com/usn/usn-562-1
- http://www.vupen.com/english/advisories/2007/3413
- http://www.vupen.com/english/advisories/2007/3414
- https://bugzilla.redhat.com/show_bug.cgi?id=296371
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11398
- https://www.exploit-db.com/exploits/9240
Affected products (2)
- cpe:2.3:a:ekiga:ekiga:*:*:*:*:*:*:*:*
- cpe:2.3:a:openh323_project:openh323:*:*:*:*:*:*:*:*
More vulnerabilities in Ekiga
- CVE-2007-1007 — Critical (CVSS 10.0): Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service…
- CVE-2007-1006 — Critical (CVSS 10.0): Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow…
- CVE-2011-1830 — Medium (CVSS 5.7): Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.
- CVE-2012-5621 — Medium (CVSS 5.0): lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service…
- CVE-2007-4897 — Medium (CVSS 5.0): pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service…
- CVE-2013-1864 — Medium (CVSS 4.3): The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion…
Other CWE-20 (Improper Input Validation) vulnerabilities
- CVE-2026-48316 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
- CVE-2026-48281 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
- CVE-2026-48277 — Critical (CVSS 10.0): ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could…
- CVE-2026-48055 — Critical (CVSS 10.0): Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and…
- CVE-2026-34910 — Critical (CVSS 10.0): A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS…
- CVE-2026-33587 — Critical (CVSS 10.0): Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and…
Browse all CWE-20 (Improper Input Validation) vulnerabilities →