CVE-2008-0944

Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing zero.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2008-02-25

Last modified

2024-08-07

Weaknesses

CWE-189

Affected products

• Instant Messaging (Ipswitch)

References

• http://aluigi.altervista.org/adv/ipsimene-adv.txt
• http://secunia.com/advisories/28824
• http://securityreason.com/securityalert/3697
• http://www.securityfocus.com/archive/1/487748/100/200/threaded
• http://www.securityfocus.com/bid/27677