Lucene search
HistoryApr 23, 2008 - 1:05 p.m.
CVE-2008-1920
cve-2008-1920
buffer overflow
icq
personal status manager
remote code execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.158 Low
EPSS
Percentile
96.0%
Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted personal status message.
Affected configurations
Node
icqmirabilis_icqMatch6.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| icq:mirabilis_icq | icq mirabilis icq | eq | 6.0 |
Related
prion
prion
Heap overflow
2008-04-23 13:05:00
cvelist
cvelist
CVE-2008-1920
2008-04-22 16:00:00
nvd
nvd
CVE-2008-1920
2008-04-23 13:05:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.158 Low
EPSS
Percentile
96.0%
Related for CVE-2008-1920