CVE-2008-2957

EPSS 1.71%
Veröffentlicht 01.07.2008 22:41:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secalert@redhat.com
Teams Watchlist Login
Unerledigt Login

The UPnP functionality in Pidgin 2.0.0, and possibly other versions, allows remote attackers to trigger the download of arbitrary files and cause a denial of service (memory or disk consumption) via a UDP packet that specifies an arbitrary URL.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 14

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Pidgin ≫ Pidgin Version2.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.71%	0.806

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:N/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/32859

http://secunia.com/advisories/33102

http://support.avaya.com/elmodocs2/security/ASA-2008-493.htm

http://www.mandriva.com/security/advisories?name=MDVSA-2009:025

http://www.redhat.com/support/errata/RHSA-2008-1023.html

http://www.securityfocus.com/bid/29985

http://www.ubuntu.com/usn/USN-675-1

http://crisp.cs.du.edu/?q=ca2007-1

http://www.openwall.com/lists/oss-security/2008/06/27/3

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17599

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9076

https://nvd.nist.gov/vuln/detail/CVE-2008-2957

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-2957

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-2957

EUVD