CVE-2007-4924

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of…

published October 8, 2007

CVSS
—
EPSS
11%
Percentile
95.8
In the wild
Unconfirmed
What it is

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10680 · 95.8th percentile
Published
2007-10-08T21:00Z
EPSS history
Timeline
  • 08 OCT 21:00Z
    The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of…
    cvelistv5