CVE-2008-2954

CVE-2008-2954 / CVE-2008-2953 (Linux DC++: linuxdcpp) affect Linux DC++ (linuxdcpp) clients prior to 0.707. The issues stem from handling of messages and file lists: an empty private message can trigger an out-of-bounds read (CVE-2008-2954) and partial file list requests can cause a NULL pointer ...