| Package | Affected versions | Patched versions |
|---|---|---|
| psi | = 0.1.0= 0.11= 0.8.6= 0.8.7= 0.9= 0.9.1= 0.9.2= 0.9.3≤ 0.12 |
PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free