EUVD-2008-6972

Malware in sbrugna...

CVE-2008-7013

NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service client crash via a crafted login response that triggers a divide-by-zero error...

Code injection

NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service client crash via a crafted login response that triggers a divide-by-zero error...

CVE-2008-7013

NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service client crash via a crafted login response that triggers a divide-by-zero error...

Stack overflow

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...

CVE-2008-6444

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...

CVE-2008-6444

CVE-2008-6444 affects Baidu Hi IM; vulnerable component is CSTransfer.dll, where a stack-based buffer overflow could allow remote code execution via a crafted packet, likely due to an improper length value. Connections across sources confirm the same description; no specific exploit details or af...

CVE-2008-6444

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...

Baidu Hi IM software parsing plaintext stack overflow

Our automatic bug exploiting tools have found a buffer overflow bug in Baidu Hi IM software which is a popular IM software in China. This bug is due to Baidu Hi do not strictly check the deciphered plaintext format in CSTransfer.dll. Because of encryption mechanism of Baidu Hi, it is hard to...