epic4: buffer overflow
| Package(s): | epic4 | CVE #(s): | CAN-2003-0328 | ||||||||||||
| Created: | November 10, 2003 | Updated: | November 25, 2003 | ||||||||||||
| Description: | Jeremy Nelson discovered a remotely exploitable buffer overflow in EPIC4, a popular client for Internet Relay Chat (IRC). A malicious server could craft a reply which triggers the client to allocate a negative amount of memory. This could lead to a denial of service if the client only crashes, but may also lead to executing of arbitrary code under the user id of the chatting user. | ||||||||||||||
| Alerts: |
| ||||||||||||||