CVE-2012-0828

Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).

Score

CVSS 3.1 9.8 Critical

Status

Modified - secalert@redhat.com

Published

2020-02-21

Last modified

2024-08-06

Weaknesses

CWE-787

Affected products

• Gtk (Gnome)
• Xchat (Xchat)
• Xchat-wdk (Xchat)
• Xchat-wdk (Xchat-wdk)

References

• http://www.openwall.com/lists/oss-security/2012/02/01/9
• https://access.redhat.com/security/cve/cve-2012-0828
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0828
• https://security-tracker.debian.org/tracker/CVE-2012-0828