CVE-2008-3680: Flagship Industries Ventrilo

Medium severity, CVSS 5.0. EPSS: 9.8% chance of exploitation in the next 30 days.

The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) by sending a type 0 packet with an invalid version followed by another packet to TCP port 3784.

Affected products

• Flagship Industries Ventrilo: version 1 only; version 1.01 only; version 1.03 only; version 1.04 only; version 1.05 only; version 1.06 only; …

Published 2008-08-14. Last modified 2026-06-16.