CVE-2011-1830: Ekiga code injection vulnerability

Ekiga · Ekiga

Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.

8.8 CVSS 3.0 High EPSS 0.79% · top 45.4% CWE-94 · Code injection

8.8CVSS 3.0 base score, v2 6.8

0.79%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References

16 Jun 2026Last modified by NVD

Description

Ekiga versions before 3.3.0 attempted to load a module from /tmp/ekiga_test.so.

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Ekiga Ekiga

References

Link	Tags
https://gitlab.gnome.org/GNOME/ekiga/commit/02654fc949722a78d41fcffac8687d73d8574647	PatchThird Party Advisory
https://gitlab.gnome.org/GNOME/ekiga/commit/02654fc949722a78d41fcffac8687d73d8574647	PatchThird Party Advisory

Track CVE-2011-1830 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2007-1007Ekiga vulnerabilityFormat string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbit…EPSS 7.1%20 Feb 2007 10.0CVE-2007-1006Ekiga vulnerabilityMultiple format string vulnerabilities in the gm_main_window_flash_message function in Ekiga before 2.0.5 allow attackers to cause a denial of servic…EPSS 3.7%20 Feb 2007 5.0CVE-2012-5621Ekiga improper input validation vulnerabilitylib/engine/components/opal/opal-call.cpp in ekiga before 4.0.0 allows remote attackers to cause a denial of service (crash) via an OPAL connection wi…EPSS 2.8%29 Sep 2014 5.0CVE-2007-4924Ekiga improper input validation vulnerabilityThe Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denia…EPSS 11%8 Oct 2007 5.0CVE-2007-4897Ekiga vulnerabilitypwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argume…EPSS 11%14 Sep 2007 4.3CVE-2013-1864Opalvoip portable tool library memory buffer overflow vulnerabilityThe Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, whic…EPSS 2.9%23 May 2014 8.8CVE-2026-65660Microsoft sharepoint server code injection vulnerabilityImproper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.KEVEPSS 2.1%11 Aug 2026 9.8CVE-2026-60004Gitea diffpatch API code injection enables remote code executionGitea before 1.27.1 allows remote code execution through the diffpatch API by way of Git hook installation. The flaw is a code injection issue (CWE-9…KEVEPSS 24%analysed26 Aug 2026

Source: NIST National Vulnerability Database (record CVE-2011-1830), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.