Referenced CVEs:
CVE-2007-4924


Description:
=========================================================== Ubuntu Security Notice USN-562-1 January 08, 2008opal vulnerabilityCVE-2007-4924===========================================================A security issue affects the following Ubuntu releases:Ubuntu 6.06 LTSUbuntu 6.10Ubuntu 7.04This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 6.06 LTS: libopal-2.2.0 2.2.1-1ubuntu1.1Ubuntu 6.10: libopal-2.2.0 2.2.3.dfsg-0ubuntu2.1Ubuntu 7.04: libopal-2.2.0 2.2.3.dfsg-2ubuntu2.1After a standard system upgrade you need to restart your session to effectthe necessary changes.Details follow:Jose Miguel Esparza discovered that certain SIP headers were not correctlyvalidated. A remote attacker could send a specially crafted packet toan application linked against opal (e.g. Ekiga) causing it to crash, leadingto a denial of service.





More...