EUVD-2008-6972

Malware in sbrugna...

Baidu HI pc client software suffers from DLL hijacking vulnerability

Baidu Hi is an instant messaging software that combines text messaging, audio and video calling, file transfer and more. The Baidu HI pc client software suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to...

CVE-2008-7013

NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service client crash via a crafted login response that triggers a divide-by-zero error...

Code injection

NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service client crash via a crafted login response that triggers a divide-by-zero error...

CVE-2008-7013

NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service client crash via a crafted login response that triggers a divide-by-zero error...

CVE-2008-7013

CVE-2008-7013 affects NetService.dll in Baidu Hi IM. The vulnerability allows remote servers to trigger a divide-by-zero via a crafted login response, causing a client crash (denial of service). The CVSS base score is 5.0 (Medium) with network access and no authentication, resulting in partial av...

Stack overflow

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...

CVE-2008-6444

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...

CVE-2008-6444

CVE-2008-6444 affects Baidu Hi IM; vulnerable component is CSTransfer.dll, where a stack-based buffer overflow could allow remote code execution via a crafted packet, likely due to an improper length value. Connections across sources confirm the same description; no specific exploit details or af...

CVE-2008-6444

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value...

Baidu Hi instant messenger integer overflow

Integer overflow on encrypted message decyphering causes buffer overflow...

Baidu Hi IM software parsing plaintext stack overflow

Our automatic bug exploiting tools have found a buffer overflow bug in Baidu Hi IM software which is a popular IM software in China. This bug is due to Baidu Hi do not strictly check the deciphered plaintext format in CSTransfer.dll. Because of encryption mechanism of Baidu Hi, it is hard to...