CVEvulnerability

CVE-2008-2954

7.8 HIGH Published 2008-07-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-07-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.

Affected configurations

• linux direct connect 0.686 • linux direct connect 0.699 • linux direct connect 0.700 • linux direct connect 0.701 • linux direct connect 0.702 • linux direct connect 0.703 • linux direct connect 0.704 • linux direct connect 0.705 • linux direct connect 0.706

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References