CVE-2008-6953: Oovoo

High severity, CVSS 9.3. EPSS: 8.6% chance of exploitation in the next 30 days.

Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long oovoo: URI.

Affected products

• Oovoo Oovoo: version 1.7.1.35 only

Published 2009-08-12. Last modified 2026-06-16.