Openh323 Project

openh323_project

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-4924 2Ekiga Openh323 Project 2Ekiga Openh323 Apr 23, 2026 Oct 8, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Sess...Show more The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."Show less
CVE-2004-0097 1Openh323 Project 1Pwlib Apr 16, 2026 Mar 3, 2004 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2007-4924

2Ekiga

Openh323 Project

2Ekiga

Openh323

Apr 23, 2026

Oct 8, 2007

N/A· v4

N/A· v3

5.0 MEDIUM· v2

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."Show less

CVE-2004-0097

1Openh323 Project

1Pwlib

Apr 16, 2026

Mar 3, 2004

N/A· v4

N/A· v3

10.0 HIGH· v2

Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.