Improper input validation in Ekiga

CVE-2012-5621

lib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection with a party name that contains invalid UTF-8 strings.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.028 (84.9th percentile) — read the EPSS interpretation.

Affected products

  • Ekiga
  • N/a — versions n/a

Weakness classification (CWE)

References