CVE-2008-6444

Baidu Hi IM - Stack-Based Buffer Overflow via Crafted Packet

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/496322/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31162
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/51696
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/45117

Scores

EPSS 0.0699
EPSS Percentile 93.4%

Details

CWE
CWE-119
Status published
Products (1)
baidu/baidu_hi
Published Mar 09, 2009
Tracked Since Feb 18, 2026