Arbitrary Code Execution

quassel is vulnerable to arbitrary code execution. The vulnerability exists through a heap corruption in void DataStreamPeer::processMessageconst QByteArray of datastreampeer.cpp...

CVE-2011-3354

The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service crash via a crafted Client-To-Client Protocol CTCP request, as demonstrated in the wild in September 2011...