A vulnerability has been reported in Ekiga, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to format string errors when the "gm_main_window_flash_message()" function is invoked. This can be exploited to crash the application or potentially execute arbitrary code by sending a specially crafted Q.931 SETUP packet.

NOTE: A related vulnerability was also reported in the Ekiga predecessor GnomeMeeting.

Solution
A fix was commited to the code management system.

Provided and/or discovered by
Mu Security

Changelog
Further details available to Secunia VIM customers

Original Advisory
Mu Security:
http://labs.musecurity.com/advisories/MU-200702-01.txt

Ekiga:
http://www.ekiga.org/index.php?rub=10&pos=0
http://bugzilla.gnome.org/show_bug.cgi?id=415526

Deep Links
Links available to Secunia VIM customers