VULNERABILITY INTELLIGENCE
CVE-2008-3680
CVSS score5 MEDIUM
EPSS probability9.81%
CISA KEVNot currently listed
Published2008-08-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) by sending a type 0 packet with an invalid version followed by another packet to TCP port 3784.
Weakness classification
- CWE-20: Improper Input Validation