CVE-2008-6953 Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long...
HighCVSS 9.3
EPSS 8.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long oovoo: URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oovoo | = 1.7.1.35 | No fix listed |
References
- 20081216 Re: ooVoo 1.7.1.35 (URL Protocol) remote unicode buffer overflow poc exploit mailing-list
- 49791 patch vdb-entry
- retrogod.altervista.org exploit
- 32698 third-party-advisory vendor-advisory
- 20081111 ooVoo 1.7.1.35 (URL Protocol) remote unicode buffer overflow poc mailing-list
- 32251 exploit patch vdb-entry
- ADV-2008-3124 vdb-entry vendor-advisory
- oovoo-uri-bo(46549) vdb-entry
- 7090 exploit