Xchat

xchat

Vendor: Xchat • 12 CVEs

CVEs (12)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-0828 3Gnome XchatXchat Wdk 3Gtk XchatXchat Wdk Nov 21, 2024 Feb 21, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 li...Show more Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).Show less
CVE-2013-7449 3Canonical Hexchat ProjectXchat 4Hexchat Ubuntu LinuxXchat+1 more May 6, 2026 Apr 21, 2016 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle atta...Show more The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.Show less
CVE-2011-5129 1Xchat 1Xchat Apr 29, 2026 Aug 30, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.
CVE-2009-0315 1Xchat 1Xchat Apr 23, 2026 Jan 28, 2009 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetA...Show more Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).Show less
CVE-2008-2841 2Microsoft Xchat 2Internet Explorer Xchat Apr 23, 2026 Jun 24, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.
CVE-2006-4455 1Xchat 1Xchat Apr 16, 2026 Aug 30, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via unspecified vectors involving the PRIVMSG command. NOTE: the vendor has disputed this vulnerability,...Show more Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via unspecified vectors involving the PRIVMSG command. NOTE: the vendor has disputed this vulnerability, stating that it does not affect 2.6.7 "or any recent version"Show less
CVE-2004-0409 1Xchat 1Xchat Apr 16, 2026 Jun 1, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.
CVE-2003-1000 1Xchat 1Xchat Apr 16, 2026 Jan 5, 2004 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, which causes a null dereference.
CVE-2002-0382 1Xchat 1Xchat Apr 16, 2026 Jun 25, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters.
CVE-2002-0006 1Xchat 1Xchat Apr 16, 2026 Jun 25, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, w...Show more XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execute arbitrary IRC commands as other clients via encoded characters in a PRIVMSG command that calls CTCP PING, which expands the characters in the client response when the percascii variable is set.Show less
CVE-2001-0792 1Xchat 1Xchat Apr 16, 2026 Oct 18, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.
CVE-2000-0787 1Xchat 1Xchat Apr 16, 2026 Oct 20, 2000 N/A· v4 N/A· v3 7.5 HIGH· v2 IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.