GLSA-200904-04 : WeeChat: Denial of Service

The remote host is affected by the vulnerability described in GLSA-200904-04 WeeChat: Denial of Service Sebastien Helleu reported an array out-of-bounds error in the colored message handling. Impact : A remote attacker could send a specially crafted PRIVMSG command, possibly leading to a Denial o...

Gentoo Security Advisory GLSA 200904-04 (weechat)

The remote host is missing updates announced in advisory GLSA 200904-04. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Fedora Core 10 FEDORA-2009-2859 (weechat)

The remote host is missing an update to weechat announced via advisory FEDORA-2009-2859. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

CVE-2009-0661

WeeChat 0.2.6 contains a denial-of-service vulnerability: a remote attacker can crash the client by sending a crafted PRIVMSG with color codes, triggering an out-of-bounds read in the colored message handling. Advisories (Gentoo GLSA 200904-04, Fedora advisories FEDORA-2009-2859/2861, Gentoo GLSA...

Debian DSA-1744-1 : weechat - missing input sanitization

Sebastien Helleu discovered that an error in the handling of color codes in the weechat IRC client could cause an out-of-bounds read of an internal color array. This can be used by an attacker to crash user clients via a crafted PRIVMSG command. The weechat version in the oldstable distribution...

[SECURITY] [DSA 1744-1] New weechat packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA-1744-1 [email protected] http://www.debian.org/security/ Nico Golde March 18th, 2009 http://www.debian.org/security/faq -...