CVE-2008-6393
EPSS 23.1%psi - denial of service
發布日:2009/3/3修改日:2026/4/28
描述
PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow.
受影響套件(2)
- Debian/psifrom 0, < 0.12.1-1
- Debian/psifrom 0, < 0.11-9