CVE-2008-0671 Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from...
HighCVSS 10.0
EPSS 15.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to execute arbitrary code via a long chat message, related to conversion from LF to CRLF.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tintin++ | = 1.97.9 | No fix listed |
| tintin wintin++ | = 1.97.9 | No fix listed |
| debian/tintin++(Debian:12) | < 1.97.9-2 | 1.97.9-2 |
| debian/tintin++(Debian:13) | < 1.97.9-2 | 1.97.9-2 |
| debian/tintin++(Debian:14) | < 1.97.9-2 | 1.97.9-2 |
References
- Debian Security Tracker CVE-2008-0671 vendor-advisory
- bugs.debian.org issue-tracking
- aluigi.altervista.org
- 28833 third-party-advisory vendor-advisory
- GLSA-201111-07 vendor-advisory
- 3632 third-party-advisory
- 20080206 Chat vulnerabilities in TinTin++ 1.97.9 mailing-list
- 27660 vdb-entry
- ADV-2008-0449 vdb-entry