CVE-2008-6393: Psi-Im Psi

High severity, CVSS 10.0. EPSS: 18.2% chance of exploitation in the next 30 days.

PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow.

Affected products

• Psi-Im Psi: up to and including 0.12; version 0.1.0 only; version 0.8.6 only; version 0.8.7 only; version 0.9 only; version 0.9.1 only; …

Published 2009-03-03. Last modified 2026-06-16.