CVE-2008-5405: Oxid Cain And Abel

High severity, CVSS 9.3. EPSS: 47% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the RDP protocol password decoder in Cain & Abel 4.9.23 and 4.9.24, and possibly earlier, allows remote attackers to execute arbitrary code via an RDP file containing a long string.

Affected products

• Oxid Cain And Abel: version 4.9.23 only; version 4.9.24 only

Published 2008-12-10. Last modified 2026-06-16.