Vulnerability Details CVE-2007-5543
Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.04
EPSS Ranking 88.1%
CVSS Severity
CVSS v2 Score 9.3
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/057935.html
- http://packetstormsecurity.org/0710-advisories/mirandaim-overflows.txt
- http://www.secureworks.com/research/threats/miranda/
- http://www.securityfocus.com/bid/26115
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/057935.html
- http://packetstormsecurity.org/0710-advisories/mirandaim-overflows.txt
- http://www.secureworks.com/research/threats/miranda/
- http://www.securityfocus.com/bid/26115
Products affected by CVE-2007-5543
-
cpe:2.3:a:miranda-im:miranda_im:0.6.8
-
cpe:2.3:a:miranda-im:miranda_im:0.7.0