CVE-2008-7074

Published: Aug 25, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled "when displaying the signon message."

Affected (13)

Products: Memcode: I.scribe

Memcode

1 product

I.scribe

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Memcode I.scribe	Version 1.88
Memcode I.scribe	Version 1.89
Memcode I.scribe	Version 1.90
Memcode I.scribe	Version 2.00 alpha1
Memcode I.scribe	Version 2.00 alpha2
Memcode I.scribe	Version 2.00 alpha3
Memcode I.scribe	Version 2.00 alpha4
Memcode I.scribe	Version 2.00 beta10
Memcode I.scribe	Version 2.00 beta11
Memcode I.scribe	Version 2.00 beta6
Memcode I.scribe	Version 2.00 beta7
Memcode I.scribe	Version 2.00 beta8
Memcode I.scribe	Version 2.00 beta9