CVE-2007-4924

Exp

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

Published: 2007-10-08 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2007-4924 is rated High Exploit Risk (69.3/100): CVSS Medium severity, with high exploitation likelihood (EPSS 23.13%, 96th percentile). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2007-4924

EDB-ID Source Kind Published Link
9240 exploit_db edb 2009-07-24 Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2007-4924

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-05-27 22.46% 23.13% +0.67%
2 2025-12-23 22.66% 22.46% -0.20%
3 2025-03-30 22.66%

Full EPSS history (14 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2007-4924

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.0 2.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:P)
Partial availability impact.
10.0 2.9 [email protected]

Weakness enumeration for CVE-2007-4924

OS Trackers for CVE-2007-4924

vendor priority summary link
redhat medium https://access.redhat.com/security/cve/CVE-2007-4924
ubuntu low CVE-2007-4924 low priority: Ubuntu including 2 source packages (opal, openh323), 10 status rows across 5 suites (dapper, edgy, feisty, gutsy, upstream): not-affected 5, released 5. https://ubuntu.com/security/CVE-2007-4924

Affected software / configurations for CVE-2007-4924

Vendor Product Version Raw CPE
ekiga ekiga <= 2.0.9 cpe:2.3:a:ekiga:ekiga:*:*:*:*:*:*:*:*
openh323_project openh323 <= 2.2.3 cpe:2.3:a:openh323_project:openh323:*:*:*:*:*:*:*:*

References for CVE-2007-4924

URL Tags
http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
http://mail.gnome.org/archives/ekiga-list/2007-September/msg00103.html Patch
http://openh323.cvs.sourceforge.net/openh323/opal/src/sip/sippdu.cxx?r1=2.83.2.19&r2=2.83.2.20
http://osvdb.org/41637
http://secunia.com/advisories/27118 Patch Vendor Advisory
http://secunia.com/advisories/27128 Patch Vendor Advisory
http://secunia.com/advisories/27129 Patch Vendor Advisory
http://secunia.com/advisories/27271
http://secunia.com/advisories/27524
http://secunia.com/advisories/28380
http://www.mandriva.com/security/advisories?name=MDKSA-2007:205
http://www.redhat.com/support/errata/RHSA-2007-0957.html Patch
http://www.s21sec.com/avisos/s21sec-037-en.txt
http://www.securityfocus.com/archive/1/482120/30/4500/threaded
http://www.securityfocus.com/bid/25955
http://www.securitytracker.com/id?1018776
http://www.ubuntu.com/usn/usn-562-1
http://www.vupen.com/english/advisories/2007/3413
http://www.vupen.com/english/advisories/2007/3414
https://bugzilla.redhat.com/show_bug.cgi?id=296371
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11398
https://www.exploit-db.com/exploits/9240
cvelogic Threat Intelligence