CVE-2008-2954 client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.
HighCVSS 7.8
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux direct connect | = 0.686 | No fix listed |
| linux direct connect | = 0.699 | No fix listed |
| linux direct connect | = 0.700 | No fix listed |
| linux direct connect | = 0.701 | No fix listed |
| linux direct connect | = 0.702 | No fix listed |
| linux direct connect | = 0.703 | No fix listed |
| linux direct connect | = 0.704 | No fix listed |
| linux direct connect | = 0.705 | No fix listed |
| linux direct connect | = 0.706 | No fix listed |
References
- cvs.berlios.de
- cvs.berlios.de exploit
- dcplusplus.svn.sourceforge.net
- 30907 third-party-advisory
- 30918 third-party-advisory
- 30037 vdb-entry
- 1020409 vdb-entry
- 1020410 vdb-entry
- dc-pm-dos(43566) vdb-entry
- FEDORA-2008-6018 vendor-advisory
- FEDORA-2008-6038 vendor-advisory