CVE-2007-4358 Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (aka connection packet) containing 0x69 in the ninth byte, which triggers a "double...
MediumCVSS 4.3
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (aka connection packet) containing 0x69 in the ninth byte, which triggers a "double-delete" of trace data, a different vulnerability than CVE-2005-1643.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zoidcom | = 0.6.5 | No fix listed |
| zoidcom | = 0.6.7 | No fix listed |
References
- aluigi.altervista.org
- aluigi.org
- 26451 third-party-advisory
- 3014 third-party-advisory
- 20070814 Crash in Zoidcom 0.6.7 mailing-list
- 25326 exploit vdb-entry
- zoidcom-zcomprocessinput-dos(36018) vdb-entry