CVE-2008-0672

MEDIUM 5.0CVE-2008-0672 · Published 12/02/2008 · updated 16/06/2026

In short

CVE-2008-0672 is a MEDIUM (CVSS 5.0) vulnerability affecting tintin++ (tintin), wintin++ (tintin).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
tintin++ tintin	`= 1.97.9`	No fix yet
wintin++ tintin	`= 1.97.9`	No fix yet

Description

The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service (application crash) via a YES message without a newline character, which triggers a NULL dereference.

References

aluigi.altervista.org/adv/rintintin-adv.txt
secunia.com/advisories/28833 · Vendor Advisory
security.gentoo.org/glsa/glsa-201111-07.xml
securityreason.com/securityalert/3632
securityfocus.com/archive/1/487687/100/0/threaded
securityfocus.com/bid/27660
vupen.com/english/advisories/2008/0449

More vulnerabilities in tintin++

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free