Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-6444

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2008-6444
Last Modified 19 Aug 2009 01:23:50
Published 09 Mar 2009 10:30:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2008-6444

Summary

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value.

Vulnerable Systems

Application

  • Baidu Hi -


References

XF - baiduhi-cstransfer-bo(45117)

BID - 31162

BUGTRAQ - 20080913 Baidu Hi IM software parsing plaintext stack overflow

OSVDB - 51696


Last Updated: 27 May 2016 10:49:12