Lucene search

[email protected]CVE-2005-1093

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1093

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

cve-2005-1093

buffer overflow

popup plus

miranda im

remote code execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.121 Low

EPSS

Percentile

95.4%

JSON

Buffer overflow in the PopUp Plus 2.0.3.8 plugin for Miranda IM, with “Use SmileyAdd Setting” enabled, allows remote attackers to execute arbitrary code.

Affected configurations

NVD

Node

popup_plus_pluginpopup_plus_plugin_for_miranda_imMatch2.0.3.8

CPENameOperatorVersion
popup_plus_plugin:popup_plus_plugin_for_miranda_impopup plus plugin popup plus plugin for miranda imeq2.0.3.8

CPE	Name	Operator	Version
popup_plus_plugin:popup_plus_plugin_for_miranda_im	popup plus plugin popup plus plugin for miranda im	eq	2.0.3.8

References

forums.miranda-im.org/showthread.php?p=9624

forums.miranda-im.org/showthread.php?t=1070

sec.org.il/coverages.php?c=89

securitytracker.com/id?1013661

www.miranda-im.org/

www.osvdb.org/15482

www.securityfocus.com/bid/13048

exchange.xforce.ibmcloud.com/vulnerabilities/20013

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

High

0.121 Low

EPSS

Percentile

95.4%

JSON

Related for CVE-2005-1093

nvd1 cvelist1