Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-0160
HistoryJan 10, 2007 - 12:00 a.m.

CVE-2007-0160

2007-01-1000:00:00
ubuntu.com
ubuntu.com
7

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.081

Percentile

94.3%

Stack-based buffer overflow in the LiveJournal support (hooks/ljhook.cc) in
CenterICQ 4.9.11 through 4.21.0, when using unofficial LiveJournal servers,
allows remote attackers to cause a denial of service (crash) and possibly
execute arbitrary code by adding the victim as a friend and using long (1)
username and (2) real name strings.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.081

Percentile

94.3%