Approved changes feed: RSS · Atom

cpe:2.3:a:silc:silc_toolkit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSilc (467c52a3-8e28-504c-963c-761c9cfe7685)
ProductSilc Toolkit (066f3747-3224-59d5-bb85-50ccb3e0407b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1552 vulnerable 2026-06-08 04:50:21.044009 Details available
The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS#1 message, which triggers an integer underflow, signedness error, and a buffer overflow. NOTE: the researcher describes this as an integer overflow, but CVE uses the "underflow" term in cases of wraparound from unsigned subtraction.
Published: 2008-03-31T17:00:00.000Z
Updated: 2024-08-07T08:24:42.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1227 vulnerable 2026-06-08 04:50:19.696396 Details available
Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via long input data. NOTE: some of these details are obtained from third party information.
Published: 2008-03-10T17:00:00.000Z
Updated: 2024-08-07T08:17:33.370Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.