weechat: code execution
| Package(s): | weechat | CVE #(s): | CVE-2012-5854 | ||||||||||||||||||||||||||||||||||||
| Created: | November 19, 2012 | Updated: | November 28, 2012 | ||||||||||||||||||||||||||||||||||||
| Description: | From the CVE entry:
Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote attackers to cause a denial of service (crash or hang) and possibly execute arbitrary code via crafted IRC colors that are not properly decoded. | ||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||