← back
CVE-2008-5159

CVE-2008-5159

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 60%
from disclosure to weapon0 days
Published on NVDNov 18
1st PoCFeb 4
metasploitFeb 4
exploitation probability
60%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/31106unverifiedexploitdbwww.exploit-db.com/exploits/16335unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://aluigi.org/adv/wincomalpd-adv.txthttp://aluigi.org/poc/wincomalpd.ziphttp://secunia.com/advisories/28763http://securityreason.com/securityalert/4610http://www.securityfocus.com/archive/1/487507/100/200/threadedhttp://www.securityfocus.com/bid/27614http://www.vupen.com/english/advisories/2008/0410