VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Aug 25, 2009· Updated Apr 23, 2026

CVE-2008-7074

CVE-2008-7074

Description

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled "when displaying the signon message."

Affected products

13
  • Memcode/I.scribe13 versions
    cpe:2.3:a:memcode:i.scribe:1.88:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:memcode:i.scribe:1.88:*:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:1.89:*:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:1.90:*:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:2.00:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:2.00:alpha2:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:2.00:alpha3:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:2.00:alpha4:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:2.00:beta10:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:2.00:beta11:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:2.00:beta6:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:2.00:beta7:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:2.00:beta8:*:*:*:*:*:*
    • cpe:2.3:a:memcode:i.scribe:2.00:beta9:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.