CVE-2007-1007

Published Feb 20, 2007

Last updated 7 years ago

Overview

Description
Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in the name, which is not properly handled in a call to the gnomemeeting_log_insert function.
Source
secalert@redhat.com
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
10
Impact score
10
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
NVD-CWE-Other

Social media

Hype score
Not currently trending

Evaluator

Comment
The product "GnomeMeeting" is now called "Ekiga".
Impact
Failed exploit attempts will like result in a system level denial-of-service condition.
Solution
Failed exploit attempts will like result in a system level denial-of-service condition.

Configurations