Description
Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | ekiga | 2.0.2-7.0.2 | RHSA-2007:0087 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Productivity 5 | ekiga | 2.0.2-7.0.2 | RHSA-2007:0087 |
Advisories 1
- RHSA-2007:0087 Red Hat Security Advisory: ekiga security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- MDKSA-2007:058 vendor-advisory
- USN-434-1 vendor-advisory
- oval:org.mitre.oval:def:10944 vdb-entry signature
- RHSA-2007:0087 vendor-advisory