CVE-2009-3051: High severity silc client vulnerability
Multiple format string vulnerabilities in lib/silcclient/cliententry.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the (1) silcclientaddclient, (2) silcclientupdateclient, and (3) silcclientnicknameformat functions.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3051?
CVE-2009-3051 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2009-3051?
To fix CVE-2009-3051, upgrade to SILC Toolkit version 1.1.10 or higher, or SILC Client version 1.1.8 or higher.
What versions are affected by CVE-2009-3051?
CVE-2009-3051 affects versions of SILC Client prior to 1.1.8 and SILC Toolkit prior to 1.1.10.
What types of attacks are possible with CVE-2009-3051?
CVE-2009-3051 allows remote attackers to execute arbitrary code through crafted format string specifiers.
How can I determine if my system is vulnerable to CVE-2009-3051?
Check if you are using an affected version of SILC Client or SILC Toolkit prior to the patched versions to determine vulnerability.