CVE-2008-6393: Buffer Overflow
PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6393?
CVE-2008-6393 has a severity rating that indicates it can lead to denial of service and potential arbitrary code execution.
How do I fix CVE-2008-6393?
To fix CVE-2008-6393, upgrade to PSI Jabber client version 0.12.1 or later.
What versions are affected by CVE-2008-6393?
CVE-2008-6393 affects PSI Jabber client versions up to and including 0.12.0.
Can I use an older version of PSI Jabber client after CVE-2008-6393?
It is highly discouraged to use older versions of PSI Jabber client that are affected by CVE-2008-6393 due to security risks.
Is there a workaround for CVE-2008-6393?
There are no recommended workarounds for CVE-2008-6393 other than upgrading to the fixed version.