Vulnerability Details CVE-2007-3728
Buffer overflow in lib/silcclient/client_notify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICK_CHANGE" notifications.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://osvdb.org/36730
- http://secunia.com/advisories/25939
- http://silcnet.org/docs/changelog/changes.txt
- http://www.securityfocus.com/bid/24795
- http://www.silcnet.org/docs/release/SILC%20Toolkit%201.1.2
- http://www.vupen.com/english/advisories/2007/2454
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35281
- http://osvdb.org/36730
- http://secunia.com/advisories/25939
- http://silcnet.org/docs/changelog/changes.txt
- http://www.securityfocus.com/bid/24795
- http://www.silcnet.org/docs/release/SILC%20Toolkit%201.1.2
- http://www.vupen.com/english/advisories/2007/2454
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35281
Products affected by CVE-2007-3728
-
cpe:2.3:a:silc:silc_client:1.1.1
-
cpe:2.3:a:silc:silc_toolkit:1.1.1