PT-2009-2605 · Icq · Icqtoolbar

Spdr · Publicado 2009-09-01 · Atualizado 2017-09-29 · CVE-2008-7136

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions ICQToolbar version 2.3

Description The issue allows remote attackers to cause a denial of service, resulting in a toolbar crash. This can be achieved by providing a long argument to certain methods, specifically the RequestURL, GetPropertyById, or SetPropertyById methods.

Recommendations For ICQToolbar version 2.3, consider avoiding the use of long arguments in the RequestURL, GetPropertyById, or SetPropertyById methods until a fix is available. As a temporary workaround, restricting the input length for these methods may help minimize the risk of a denial of service.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-7136

Produtos afetados

Icqtoolbar

Referências · 4

• 🔥 http://securiteam.com/exploits/5WP0115NPU.html · Exploit
• 🔥 https://exploit-db.com/exploits/5217 · Exploit
• 🔥 http://securityfocus.com/bid/28118 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7136 · Nota de Segurança