CVE-2008-0672 The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service (application crash) via a YES message without a newline character, which tri...
MediumCVSS 5.0
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service (application crash) via a YES message without a newline character, which triggers a NULL dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tintin++ | = 1.97.9 | No fix listed |
| tintin wintin++ | = 1.97.9 | No fix listed |
| debian/tintin++(Debian:12) | < 1.97.9-2 | 1.97.9-2 |
| debian/tintin++(Debian:13) | < 1.97.9-2 | 1.97.9-2 |
| debian/tintin++(Debian:14) | < 1.97.9-2 | 1.97.9-2 |
References
- aluigi.altervista.org
- 28833 third-party-advisory vendor-advisory
- GLSA-201111-07 vendor-advisory
- 3632 third-party-advisory
- 20080206 Chat vulnerabilities in TinTin++ 1.97.9 mailing-list
- 27660 vdb-entry
- ADV-2008-0449 vdb-entry
- Debian Security Tracker CVE-2008-0672 vendor-advisory
- bugs.debian.org issue-tracking