CVE-2008-5279

The CVE-2008-5279 entry concerns the Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier, where remote attackers can trigger arbitrary code execution via (1) heap-based buffer overflows from long room names or source accounts, and (2) a stack-based overflow...

CVE-2008-5280

The CVE-2008-5280 vulnerability affects the Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0/2.1. It allows remote attackers to cause a denial of service (NULL pointer dereference) through crafted requests without required parameters. The OpenVAS/NVD records corroborate this ...

ooVoo URI处理器远程栈溢出漏洞

BUGTRAQ ID: 32251 ooVoo是免费的视频聊天工具。 ooVoo在处理命令行参数时存在栈溢出漏洞。如果用户受骗访问了恶意网页并向ooVoo: URI处理器传送了超长字符串的话，就可能触发这个溢出，导致执行任意指令。 ooVoo LLC ooVoo 1.7.1.57 ooVoo LLC ooVoo 1.7.1.35 ooVoo LLC --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.oovoo.com ?php / ooVoo 1.7.1.35 URL Protocol remote...

ooVoo 1.7.1.35 - URL Protocol Remote Unicode Buffer Overflow (PoC)

ooVoo 1.7.1.35 - URL Protocol Remote Unicode Buffer Overflow PoC ?php / ooVoo 1.7.1.35 URL Protocol remote unicode buffer overflow poc by Nine:Situations:Group::bruiser tested against IE8b/xp sp3 9sg site: http://retrogod.altervista.org/ software site: http://www.oovoo.com/ description: ooVoo is ...

ooVoo 1.7.1.35 (URL Protocol) remote unicode buffer overflow poc

?php / ooVoo 1.7.1.35 URL Protocol remote unicode buffer overflow poc by Nine:Situations:Group::bruiser tested against IE8b/xp sp3 9sg site: http://retrogod.altervista.org/ software site: http://www.oovoo.com/ description: ooVoo is a startup video conferencing and instant messaging application,...

Update Protection against mIRC PRIVMSG Message Processing Buffer Overflow

A buffer overflow vulnerability was reported in mIRC, a popular IRC client for Microsoft Windows. Internet Relay Chat IRC is a form of instant messaging over the Internet, mainly designed for group communication in discussion forums. Remote attackers could exploit this vulnerability by tricking a...

Pidgin Detection (Windows)

Pidgin, an open source, multi-protocol instant messaging client, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34205; scriptversion"1.17"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/02/06"; scriptxrefname:"IAVT...

DSA-1610-1 gaim - execution of arbitrary code

Bulletin has no description...

Pidgin 2.4.1 Vulnerability

Application: Pidgin 2.4.1 OS: Linux - Ubuntu 8.04 ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description Pidgin is an instant messaging program with which you can use a number of...

gtalk-inject.txt

Gtalk 1.0.0.105 html injection and Stealing messages Vendor url:http://www.google.com Advisore:http://lostmon.blogspot.com/2008/06/ gtalk-100105-html-injection-and.html Vendor notify:yes exploit available:yes GTalk is a service offered by Google instant messaging. It allows communication via...

IBM Lotus Sametime Community Services Multiplexer buffer overflow

Added: 05/30/2008 CVE: CVE-2008-2499 BID: 29328 OSVDB: 45610 Background IBM Lotus Sametime is enterprise instant messaging and web conferencing software. Problem A buffer overflow vulnerability in the Community Services Multiplexer allows remote attackers to execute arbitrary commands by requesti...

CVE-2008-0944

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

Design/Logic Flaw

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

Directory traversal

Directory traversal vulnerability in the IM Server aka IMserve or IMserver in Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. dot dot in the recipient field...

Format string

Format string vulnerability in the logging function in the IM Server aka IMserve or IMserver in Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service daemon crash and possibly have unspecified other impact via format string specifiers in ...

CVE-2008-0945

The CVE-2008-0945 entry concerns Ipswitch Instant Messaging (IM) Server (IMserve/IMserver) 2.0.8.1 and earlier. A format string vulnerability exists in the server’s logging function, allowing remote authenticated users to trigger a denial of service (daemon crash) and possibly other unspecified i...

CVE-2008-0944

Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote attackers to cause a denial of service NULL dereference and application crash via a version field containing zero...

CVE-2008-0944

Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier is vulnerable to a remote denial of service (NULL dereference and application crash) caused by a version field containing zero. No remediation or exploit details are provided in the documents. If exploitable vectors or fixes exist, they are not ...

CVE-2008-0945

Format string vulnerability in the logging function in the IM Server aka IMserve or IMserver in Ipswitch Instant Messaging IM 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service daemon crash and possibly have unspecified other impact via format string specifiers in ...

Zilab Chat and Instant Messaging (ZIM) 2.0/2.1 Server - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/27940/info Zilab Chat and Instant Messaging ZIM Server is prone to multiple vulnerabilities, including denial-of-service issues and memory-corruption issues. A successful exploit may allow remote attackers to execute arbitrary code in the context of the...