6.4

CVE-2008-2957

The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pidgin ≫ Pidgin Version2.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.1% 0.793
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:N/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/32859
http://secunia.com/advisories/33102
http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm
http://www.mandriva.com/security/advisories?name=MDVSA-2009:025
http://www.redhat.com/support/errata/RHSA-2008-1023.html
http://www.securityfocus.com/bid/29985
http://www.ubuntu.com/usn/USN-675-1
http://crisp.cs.du.edu/?q=ca2007-1
http://www.openwall.com/lists/oss-security/2008/06/27/3
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17599
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9076