CVE-2007-1006: Ekiga

High severity, CVSS 10.0. EPSS: 3.7% chance of exploitation in the next 30 days.

Multiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of service and possibly execute arbitrary code via a crafted Q.931 SETUP packet.

Affected products

• Ekiga Ekiga: up to and including 2.0.4

Published 2007-02-20. Last modified 2026-06-16.