Lucene search

K
cve[email protected]CVE-2008-2955
HistoryJul 01, 2008 - 10:41 p.m.

CVE-2008-2955

2008-07-0122:41:00
CWE-20
web.nvd.nist.gov
36
pidgin
2.4.1
denial of service
vulnerability
long filename
cve-2008-2955
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.059 Low

EPSS

Percentile

93.4%

Pidgin 2.4.1 allows remote attackers to cause a denial of service (crash) via a long filename that contains certain characters, as demonstrated using an MSN message that triggers the crash in the msn_slplink_process_msg function.

Affected configurations

NVD
Node
pidginpidginMatch2.4.1
CPENameOperatorVersion
pidgin:pidginpidgineq2.4.1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.2 High

AI Score

Confidence

High

0.059 Low

EPSS

Percentile

93.4%