[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-5621Date: (C)2014-10-01   (M)2023-12-22


lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
BID-56790
FEDORA-2013-2998
http://seclists.org/oss-sec/2012/q4/407
ekiga-utf8-dos(80640)
http://ftp.gnome.org/pub/gnome/sources/ekiga/4.0/ekiga-4.0.0.news
https://blogs.oracle.com/sunsecurity/entry/cve_2012_5621_denial_of
https://bugzilla.redhat.com/show_bug.cgi?id=883058
https://git.gnome.org/browse/ekiga/commit/?id=7d09807257

CPE    1
cpe:/a:ekiga:ekiga
CWE    1
CWE-20
OVAL    6
oval:org.secpod.oval:def:104688
oval:org.secpod.oval:def:104685
oval:org.secpod.oval:def:104684
oval:org.secpod.oval:def:104695
...

© SecPod Technologies