CVE-2010-2725

Published: Aug 5, 2010Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

Affected (21)

Products: Barnowl: Barnowl

Barnowl

1 product

Barnowl

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Barnowl Barnowl	Up to 1.6.1
Barnowl Barnowl	Version 1.0.0
Barnowl Barnowl	Version 1.0.1
Barnowl Barnowl	Version 1.0.2.1
Barnowl Barnowl	Version 1.0.2
Barnowl Barnowl	Version 1.0.3
Barnowl Barnowl	Version 1.0.4.1
Barnowl Barnowl	Version 1.0.4
Barnowl Barnowl	Version 1.0.5
Barnowl Barnowl	Version 1.1.1
Barnowl Barnowl	Version 1.1
Barnowl Barnowl	Version 1.2.1
Barnowl Barnowl	Version 1.2
Barnowl Barnowl	Version 1.3
Barnowl Barnowl	Version 1.4
Barnowl Barnowl	Version 1.4 rc1
Barnowl Barnowl	Version 1.5.1
Barnowl Barnowl	Version 1.5
Barnowl Barnowl	Version 1.5 rc1
Barnowl Barnowl	Version 1.5 rc2
Barnowl Barnowl	Version 1.6

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://barnowl.mit.edu/wiki/release-notes/1.6.2

Source: cve@mitre.org

Vendor Advisory

http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog

Source: cve@mitre.org

http://barnowl.mit.edu/wiki/release-notes/1.6.2

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.