CVE-2008-6393

Description

PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow.

Primary references

• cve@mitre.org — Exploit
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Vendor Advisory
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Patch
• cve@mitre.org
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org