CVE:CVE-2008-2954
CNNVD:CNNVD-200807-009
DC++(资源共享大师)是一个开放源码的免费P2P客户端软件。
DC++在处理部分文件列表请求时存在空指针引用漏洞，远程攻击者可以发送特制的请求导致客户端崩溃；DC++的dcpp/dcpp/NmdcHub.cpp文件中的NmdcHub::onLine()函数没有正确地处理私人消息，如果远程攻击者发送了主体为空的私人消息，就会导致客户端崩溃。
solution:Upgrade linux direct_connect to a higher version than 0.686,0.699,0.700,0.701,0.702,0.703,0.704,0.705,0.706,and avoid the version 0.686,0.699,0.700,0.701,0.702,0.703,0.704,0.705,0.706