EUVD-2008-5256

Malware in sbrugna...

Null pointer dereference

The Local ZIM Server in Zilab Chat and Instant Messaging ZIM Server 2.0 and 2.1 allows remote attackers to cause a denial of service NULL pointer dereference via crafted requests without required parameters...

CVE-2008-5279

The CVE-2008-5279 entry concerns the Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier, where remote attackers can trigger arbitrary code execution via (1) heap-based buffer overflows from long room names or source accounts, and (2) a stack-based overflow...