irssi: heap corruption
| Package(s): | irssi | CVE #(s): | CVE-2016-7045 CVE-2016-7044 | ||||||||||||||||||||||||||||
| Created: | September 22, 2016 | Updated: | October 11, 2016 | ||||||||||||||||||||||||||||
| Description: | According to the irssi advisory, a missing length check can cause a range of memory to be overwritten. Evidently, only zeroes can be written, so opinions differ on whether this vulnerability is exploitable for code execution. | ||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||
