CVE-2008-1552

The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before…

published March 31, 2008

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS#1 message, which triggers an integer underflow, signedness error, and a buffer overflow. NOTE: the researcher describes this as an integer overflow, but CVE uses the "underflow" term in cases of wraparound from unsigned subtraction.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04105 · 90.7th percentile
Published
2008-03-31T17:00Z
EPSS history
Timeline
  • 31 MAR 17:00Z
    The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before…
    cvelistv5