Lucene search

K
nvd[email protected]NVD:CVE-2008-2008
HistoryApr 29, 2008 - 1:09 p.m.

CVE-2008-2008

2008-04-2913:09:00
CWE-119
web.nvd.nist.gov
2

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.049

Percentile

92.8%

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long nickname in an MSN protocol message.

Affected configurations

Nvd
Node
cerulean_studiostrillianMatch3.1.9.0basic
OR
cerulean_studiostrillianMatch3.1.9.0pro
VendorProductVersionCPE
cerulean_studiostrillian3.1.9.0cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:basic:*:*:*:*:*
cerulean_studiostrillian3.1.9.0cpe:2.3:a:cerulean_studios:trillian:3.1.9.0:*:pro:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

High

EPSS

0.049

Percentile

92.8%

Related for NVD:CVE-2008-2008