CVE Vulnerabilities

CVE-2005-4817

Published: Dec 31, 2005 | Modified: Jul 29, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
UNTRIAGED

Format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before 0.2.5 allows attackers to cause a denial of service and possibly execute arbitrary code via unknown attack vectors that cause format strings to be injected into the wprintw function.

Affected Software

Name Vendor Start Version End Version
Tmsnc Tmsnc 0.1.0 (including) 0.1.0 (including)
Tmsnc Tmsnc 0.1.0a (including) 0.1.0a (including)
Tmsnc Tmsnc 0.1.0b (including) 0.1.0b (including)
Tmsnc Tmsnc 0.1.1 (including) 0.1.1 (including)
Tmsnc Tmsnc 0.1.2 (including) 0.1.2 (including)
Tmsnc Tmsnc 0.1.3 (including) 0.1.3 (including)
Tmsnc Tmsnc 0.1.4 (including) 0.1.4 (including)
Tmsnc Tmsnc 0.1.5 (including) 0.1.5 (including)
Tmsnc Tmsnc 0.2.0 (including) 0.2.0 (including)
Tmsnc Tmsnc 0.2.0b (including) 0.2.0b (including)
Tmsnc Tmsnc 0.2.1 (including) 0.2.1 (including)
Tmsnc Tmsnc 0.2.2 (including) 0.2.2 (including)
Tmsnc Tmsnc 0.2.3 (including) 0.2.3 (including)
Tmsnc Tmsnc 0.2.4 (including) 0.2.4 (including)
Tmsnc Ubuntu dapper *
Tmsnc Ubuntu devel *
Tmsnc Ubuntu edgy *
Tmsnc Ubuntu feisty *
Tmsnc Ubuntu gutsy *

References