CVE-2009-0661

Published: Mar 19, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read.

Affected (1)

Products: Flashtux: Weechat

Flashtux

1 product

Weechat

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Flashtux Weechat	Version 0.2.6

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (22)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940

Source: cve@mitre.org

http://osvdb.org/52763

Source: cve@mitre.org

http://savannah.nongnu.org/bugs/index.php?25862

Source: cve@mitre.org

http://secunia.com/advisories/34304

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/34328

Source: cve@mitre.org

Vendor Advisory

http://weechat.flashtux.org/

Source: cve@mitre.org

Vendor Advisory

http://www.debian.org/security/2009/dsa-1744

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/03/17/8

Source: cve@mitre.org

http://www.securityfocus.com/bid/34148

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2009/0758

Source: cve@mitre.org

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49295

Source: cve@mitre.org

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940