CVE-2008-1136: Synce

High severity, CVSS 9.3. EPSS: 6.8% chance of exploitation in the next 30 days.

The Utils::runScripts function in src/utils.cpp in vdccm 0.92 through 0.10.0 in SynCE (SynCE-dccm) allows remote attackers to execute arbitrary commands via shell metacharacters in a certain string to TCP port 5679.

Affected products

• Synce Synce: version 0.10.0 only; version 0.92 only

Published 2008-03-04. Last modified 2026-06-16.