PT-2009-2543 · Memecode · Ai Scribe

Alfons Luja + 1 · Publicado 2009-08-25 · Atualizado 2017-09-29 · CVE-2008-7074

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MemeCode Software i.Scribe versions 1.88 through 2.00 before Beta9

Description The issue allows remote SMTP servers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a server response. This occurs when the software fails to properly handle the response while displaying the signon message.

Recommendations For versions 1.88 through 2.00 before Beta9, update to Beta9 or later to resolve the issue.

Exploit

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2008-7074

Produtos afetados

Ai Scribe

Referências · 7

• 🔥 https://exploit-db.com/exploits/7249 · Exploit
• 🔥 http://securityfocus.com/bid/32497 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46970 · Nota
• http://osvdb.org/50232 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7074 · Nota de Segurança
• http://memecode.com/site/ver.php?id=264 · Nota
• http://secunia.com/advisories/32906 · Aviso do Fabricante