A vulnerability has been identified in ooVoo, which could be exploited by remote attackers to compromise a vulnerable system. This issue is caused by a buffer overflow error when processing overly long "oovoo:" URIs, which could allow remote attackers to crash an affected application or execute arbitrary code by tricking a user into visiting a specially crafted web page.

Affected Products

ooVoo versions 1.x

Solution

Upgrade to the latest version :
http://www.oovoo.com/download/

References

http://www.vupen.com/english/advisories/2008/3124

Credits

Vulnerability reported by Nine:Situations:Group::bruiser.

Changelog

2008-11-12 : Initial release
2008-11-13 : Updated Solution

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.