CVE-2008-2957

EPSS 1.71%
Published 01.07.2008 22:41:00
Last modified 09.04.2025 00:30:58
Source secalert@redhat.com
Teams watchlist Login
Open Login

The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL.

Affected products Warnungen 0 Metrics 2 CWE 1 References 14

Data is provided by the National Vulnerability Database (NVD)

Pidgin ≫ Pidgin Version2.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.71%	0.806

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:N/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/32859

http://secunia.com/advisories/33102

http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm

http://www.mandriva.com/security/advisories?name=MDVSA-2009:025

http://www.redhat.com/support/errata/RHSA-2008-1023.html

http://www.securityfocus.com/bid/29985

http://www.ubuntu.com/usn/USN-675-1

http://crisp.cs.du.edu/?q=ca2007-1

http://www.openwall.com/lists/oss-security/2008/06/27/3

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17599

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9076

https://nvd.nist.gov/vuln/detail/CVE-2008-2957

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-2957

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-2957

EUVD