PT-2009-2543 · Memecode · Ai Scribe

Alfons Luja + 1 · Published 2009-08-25 · Updated 2017-09-29 · CVE-2008-7074

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MemeCode Software i.Scribe versions 1.88 through 2.00 before Beta9

Description The issue allows remote SMTP servers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a server response. This occurs when the software fails to properly handle the response while displaying the signon message.

Recommendations For versions 1.88 through 2.00 before Beta9, update to Beta9 or later to resolve the issue.

Exploit

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2008-7074

Affected Products

Ai Scribe

References · 7

• 🔥 https://exploit-db.com/exploits/7249 · Exploit
• 🔥 http://securityfocus.com/bid/32497 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7074 · Security Note
• http://secunia.com/advisories/32906 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46970 · Note
• http://osvdb.org/50232 · Note
• http://memecode.com/site/ver.php?id=264 · Note