CVE-2012-0828

Опубликовано: 21 фев. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).

Ссылки

http://www.openwall.com/lists/oss-security/2012/02/01/9
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-0828
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0828
Issue Tracking
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-0828
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/02/01/9
Mailing List
Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-0828
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-0828
Issue Tracking
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-0828
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnome:gtk:2.10.4:*:*:*:*:*:*:*

cpe:2.3:a:gnome:gtk:2.14.7:*:*:*:*:*:*:*

cpe:2.3:a:gnome:gtk:2.18.9:*:*:*:*:*:*:*

cpe:2.3:a:gnome:gtk:2.24.7:*:*:*:*:*:*:*

cpe:2.3:a:xchat:xchat:*:*:*:*:*:*:*:*

Версия до 2.8.6 (исключая)

cpe:2.3:a:xchat-wdk:xchat-wdk:*:*:*:*:*:*:*:*

Версия до 1499-4 (исключая)

EPSS

Процентиль: 90%

0.05888

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2012-0828

redhat

около 14 лет назад

CVE-2012-0828

CVSS3: 9.8

debian

почти 6 лет назад

Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xch ...

GHSA-pcc3-c79c-gx8x

github

почти 4 года назад

EPSS

Процентиль: 90%

0.05888

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787