CVE-2007-5543

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-03-18 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Miranda IM 0.6.8 and 0.7.0 allows remote attackers to execute arbitrary code via a crafted Yahoo! Messenger packet. NOTE: this might overlap CVE-2007-5590.

Affected products

Miranda-Im Miranda Im: 0.6.8, 0.7.0

References

http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/057935.html
http://packetstormsecurity.org/0710-advisories/mirandaim-overflows.txt
http://www.secureworks.com/research/threats/miranda/
http://www.securityfocus.com/bid/26115
http://lists.grok.org.uk/pipermail/full-disclosure/2007-October/057935.html
http://packetstormsecurity.org/0710-advisories/mirandaim-overflows.txt
http://www.secureworks.com/research/threats/miranda/
http://www.securityfocus.com/bid/26115

Get alerted when CVE-2007-5543 or the next vulnerability affects your stack