← Back

CVE-2012-0828

nvd nist
Published: Feb 21, 2020Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).

Affected (6)

Products: Gnome: Gtk · Xchat: Xchat · Xchat Wdk: Xchat Wdk
Gnome
1 product
Gtk
Xchat
1 product
Xchat
Xchat Wdk
1 product
Xchat Wdk
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Gnome
Gtk
Version 2.10.4
Gtk
Version 2.14.7
Gtk
Version 2.18.9
Gtk
Version 2.24.7
Xchat
Before 2.8.6
Xchat Wdk
Before 1499-4

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (8)

Source: secalert@redhat.com
Mailing ListThird Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Issue TrackingPatchThird Party Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.