CVE-2008-7074: Memcode I.scribe

High severity, CVSS 9.3. EPSS: 4.9% chance of exploitation in the next 30 days.

Format string vulnerability in MemeCode Software i.Scribe 1.88 through 2.00 before Beta9 allows remote SMTP servers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a server response, which is not properly handled "when displaying the signon message."

Affected products

• Memcode I.scribe: version 1.88 only; version 1.89 only; version 1.90 only; version 2.00 only

Published 2009-08-25. Last modified 2026-06-16.