weechat: code execution [LWN.net]

Package(s):

weechat

CVE #(s):

CVE-2012-5854

Created:

November 19, 2012

Updated:

November 28, 2012

Description:

From the CVE entry:

Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote attackers to cause a denial of service (crash or hang) and possibly execute arbitrary code via crafted IRC colors that are not properly decoded.

Alerts:

Mageia	MGASA-2012-0330	2012-11-17
Fedora	FEDORA-2012-17973	2012-11-19
Fedora	FEDORA-2012-18006	2012-11-19
openSUSE	openSUSE-SU-2012:1580-1	2012-11-28
Fedora	FEDORA-2012-19533	2012-12-11
Fedora	FEDORA-2012-19538	2012-12-11
openSUSE	openSUSE-SU-2013:0150-1	2013-01-23
Mandriva	MDVSA-2013:136	2013-04-10

(Log in to post comments)