Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2008-5279

Опубликовано: 29 нояб. 2008
Источник: nvd
CVSS2: 10
EPSS Низкий

Описание

The Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier allow remote attackers to execute arbitrary code via (1) heap-based buffer overflows involving multiple vectors including a long room name and a long source account, and (2) a stack-based buffer overflow with a long username in an information request. NOTE: some of these details are obtained from third party information.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:zilab:zim_server:*:*:*:*:*:*:*:*
Версия до 2.1 (включая)
cpe:2.3:a:zilab:zim_server:2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 90%
0.0593
Низкий

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

github
больше 3 лет назад

The Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier allow remote attackers to execute arbitrary code via (1) heap-based buffer overflows involving multiple vectors including a long room name and a long source account, and (2) a stack-based buffer overflow with a long username in an information request. NOTE: some of these details are obtained from third party information.

EPSS

Процентиль: 90%
0.0593
Низкий

10 Critical

CVSS2

Дефекты

CWE-119