CVE-2009-1959

Severity

50%

Complexity

99%

Confidentiality

48%

Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow.

Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow.

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

First reported 15 years ago

2009-06-08 01:00:00

Last updated 7 years ago

2017-08-17 01:30:00

Affected Software

Irssi 0.8.13

0.8.13

References

http://bugs.irssi.org/index.php?do=details&task_id=662

Exploit, Vendor Advisory

SUSE-SR:2009:012

35685

35812

36152

http://www.irssi.org/ChangeLog

Exploit, Vendor Advisory

MDVSA-2009:133

[oss-security] 20090529 CVE Request (irssi)

35399

1022410

USN-800-1

ADV-2009-1596

http://xorl.wordpress.com/2009/05/28/irssi-event_wallops-off-by-one-readwrite/

Exploit

irssi-eventwallops-dos(51184)

FEDORA-2009-7012

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.