epic4: buffer overflows and arbitrary code execution
| Package(s): | epic4 |
CVE #(s): | |
| Created: | May 2, 2003 |
Updated: | May 22, 2003 |
| Description: |
Timo Sirainen discovered several problems in EPIC4, a popular client for
Internet Relay Chat (IRC). A malicious server could craft special reply
strings, triggering the client to write beyond buffer boundaries. This
could lead to a denial of service if the client only crashes, but may also
lead to executing of arbitrary code under the user id of the chatting user. |
| Alerts: |
|
