CVE-2007-1502

Multiple buffer overflows in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via a (1) long command, (2) long server argument to the (a) connect or (b) server commands, (3) long nick argument to the (c) nick command, or a long (4) nick or (5) message argument to the (d) ctcp, (e) chat, (f) notice, (g) message (msg), or (h) query commands.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-03-19

Last modified

2024-08-07

Affected products

• Rhapsody Irc (Rhapsody Irc)

References

• http://osvdb.org/35002
• http://osvdb.org/35003
• http://osvdb.org/35004
• http://securityreason.com/securityalert/2447
• http://www.securityfocus.com/archive/1/463092/100/0/threaded
• http://www.securityfocus.com/bid/23011