1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
|
Candidate: CVE-2012-5854
PublicDate: 2012-11-19
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5854
http://www.openwall.com/lists/oss-security/2012/11/12
Description:
Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote
attackers to cause a denial of service (crash or hang) and possibly execute
arbitrary code via crafted IRC colors that are not properly decoded.
Ubuntu-Description:
Notes:
Bugs:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=693026
Priority: medium
Discovered-by:
Assigned-to:
Patches_weechat:
upstream_weechat: released (0.3.9.1-1)
hardy_weechat: ignored (reached end-of-life)
lucid_weechat: ignored (reached end-of-life)
oneiric_weechat: ignored (reached end-of-life)
precise_weechat: ignored (reached end-of-life)
precise/esm_weechat: DNE (precise was needed)
quantal_weechat: ignored (reached end-of-life)
raring_weechat: not-affected (0.3.9.1-1)
saucy_weechat: not-affected (0.3.9.1-1)
trusty_weechat: not-affected (0.3.9.1-1)
utopic_weechat: not-affected (0.3.9.1-1)
vivid_weechat: not-affected (0.3.9.1-1)
vivid/stable-phone-overlay_weechat: DNE
vivid/ubuntu-core_weechat: DNE
wily_weechat: not-affected (0.3.9.1-1)
xenial_weechat: not-affected (0.3.9.1-1)
yakkety_weechat: not-affected (0.3.9.1-1)
zesty_weechat: not-affected (0.3.9.1-1)
devel_weechat: not-affected (0.3.9.1-1)
|