CyberSec.Space Logo
Back to CVE Browser

CVE-2008-0672

MEDIUM
5.0
CVSS Severity Score
EPSS Score0.0110%
EPSS Percentile9.03th
PublishedFeb 12, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service (application crash) via a YES message without a newline character, which triggers a NULL dereference.

Affected Platforms (CPE)

📦
Tintin

Tintin\+\+

= 1.97.9
📦
Tintin

Wintin\+\+

= 1.97.9

References & Advisories

🔗 http://aluigi.altervista.org/adv/rintintin-adv.txt
🔗 http://secunia.com/advisories/28833
🔗 http://security.gentoo.org/glsa/glsa-201111-07.xml
🔗 http://securityreason.com/securityalert/3632
🔗 http://www.securityfocus.com/archive/1/487687/100/0/threaded
🔗 http://www.securityfocus.com/bid/27660
🔗 http://www.vupen.com/english/advisories/2008/0449
🔗 http://aluigi.altervista.org/adv/rintintin-adv.txt

Related Vulnerabilities

CVE-2008-067110.0

Stack-based buffer overflow in the add_line_buffer function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to exec...

CVE-2019-76299.8

Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attackers to ex...

CVE-2008-06737.5

TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunit...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...