CyberSec.Space Logo
返回 CVE 浏览器

CVE-2008-5279

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1110%
EPSS Percentile31.00th
Published2008年11月29日
Last Modified2026年4月23日

Vulnerability Description

The Local ZIM Server (zcs.exe) in Zilab Chat and Instant Messaging (ZIM) Server 2.1 and earlier allow remote attackers to execute arbitrary code via (1) heap-based buffer overflows involving multiple vectors including a long room name and a long source account, and (2) a stack-based buffer overflow with a long username in an information request. NOTE: some of these details are obtained from third party information.

Affected Platforms (CPE)

📦
Zilab

Zim Server

<= 2.1
📦
Zilab

Zim Server

= 2.0

References & Advisories

相关漏洞威胁