Description
lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings.
References
- https://blogs.oracle.com/sunsecurity/entry/cve_2012_5621_denial_of
- https://bugzilla.redhat.com/show_bug.cgi?id=883058
- FEDORA-2013-2998 vendor-advisory
- http://ftp.gnome.org/pub/gnome/sources/ekiga/4.0/ekiga-4.0.0.news
- https://git.gnome.org/browse/ekiga/commit/?id=7d09807257
- ekiga-utf8-dos(80640) vdb-entry
- 56790 vdb-entry
- [oss-security] 20121203 Re: CVE Request -- Ekiga (x < 4.0.0): DoS (crash) after receiving call from other party with not UTF-8 valid name mailing-list