CVE-2008-1227

EUVD-2008-1236
Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via long input data.  NOTE: some of these details are obtained from third party information.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
Affected Products (NVD)
VendorProductVersion
silcsilc_toolkit
𝑥
≤ 1.1.5
silcsilc_toolkit
1.1
silcsilc_toolkit
1.1.1
silcsilc_toolkit
1.1.2
silcsilc_toolkit
1.1.3
silcsilc_toolkit
1.1.4
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
silc-toolkit
dapper
ignored
edgy
ignored
feisty
ignored
gutsy
ignored
hardy
Fixed 1.1.5-1ubuntu1
released
intrepid
Fixed 1.1.5-1ubuntu1
released
jaunty
Fixed 1.1.5-1ubuntu1
released
karmic
Fixed 1.1.5-1ubuntu1
released