Lucene search

K
cveMitreCVE-2008-2008
HistoryApr 29, 2008 - 1:09 p.m.

CVE-2008-2008

2008-04-2913:09:00
CWE-119
mitre
web.nvd.nist.gov
19
cve-2008-2008
buffer overflow
display names
trillian
remote attack
denial of service
arbitrary code
msn protocol
vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

High

EPSS

0.049

Percentile

92.8%

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long nickname in an MSN protocol message.

Affected configurations

Nvd
Node
cerulean_studiostrillianMatch3.1.9.0basic
OR
cerulean_studiostrillianMatch3.1.9.0pro
VendorProductVersionCPE
cerulean_studiostrillian3.1.9.0cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:basic:*:*:*:*:*
cerulean_studiostrillian3.1.9.0cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:pro:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8

Confidence

High

EPSS

0.049

Percentile

92.8%

Related for CVE-2008-2008