CVE-2008-6953

Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long oovoo: URI.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

8.60% chance of exploitation in the next 30 days, 95th percentile

Published

2009-08-12

Updated

2024-08-07

Proof-of-concept exploits (2)

• http://archives.neohapsis.com/archives/bugtraq/2008-11/0082.html
• http://www.securityfocus.com/archive/1/498235/100/0/threaded

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/7090

References

• CVE Record
• NVD entry

Related

• CVE-2008-6952
• CVE-2008-6955
• CVE-2008-6951
• CVE-2008-6956
• CVE-2008-6950
• CVE-2008-6957