3 results (0.003 seconds)

CVSS: 9.8EPSS: 2%CPEs: 7EXPL: 0

CVE-2007-3713

https://notcve.org/view.php?id=CVE-2007-3713

11 Jul 2007 — Multiple buffer overflows in Konst CenterICQ 4.9.11 through 4.21 allow remote attackers to execute arbitrary code via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this might overlap CVE-2007-0160. Múltiples desbordamientos de búfer en Konst CenterICQ 4.9.11 hasta 4.21 permiten a atacantes remotos ejecutar código de su elección mediante vectores no especificados. NOTA: El origen de esta información es desconocido... • http://secunia.com/advisories/28103 •

CVSS: 9.8EPSS: 4%CPEs: 7EXPL: 1

CVE-2007-0160

https://notcve.org/view.php?id=CVE-2007-0160

10 Jan 2007 — Stack-based buffer overflow in the LiveJournal support (hooks/ljhook.cc) in CenterICQ 4.9.11 through 4.21.0, when using unofficial LiveJournal servers, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by adding the victim as a friend and using long (1) username and (2) real name strings. Un desbordamiento de búfer en la región stack de la memoria en el soporte LiveJournal (hooks/ljhook.cc) en CenterICQ versión 4.9.11 hasta versión 4.21.0, cuando se utilizan se... • http://osvdb.org/33408 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.5EPSS: 0%CPEs: 69EXPL: 0

CVE-2005-1914

https://notcve.org/view.php?id=CVE-2005-1914

17 Jul 2005 — CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file. CenterICQ 4.20.0 y anteriores crea ficheros temporales con nombres de ficheros predecibles, lo que permite que usuarios locales sobreescriban ficheros arbitrarios mediante un ataque de enlaces simbólicos en el fichero temporal "gg.token.PID". • http://www.debian.org/security/2005/dsa-754 •