CVE-2012-5854

WeeChat 0.3.6-0.3.9 - Heap-Based Buffer Overflow via IRC Color Decoding

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote attackers to cause a denial of service (crash or hang) and possibly execute arbitrary code via crafted IRC colors that are not properly decoded.

References (13)

Core 13
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/87279
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/56482
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092536.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/51377
Various Sources x_refsource_confirm
https://savannah.nongnu.org/bugs/?37704
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2012/11/12/2
Third Party Advisory x_refsource_confirm
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0330
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2012-11/msg00087.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092228.html
Vendor Advisory x_refsource_confirm
http://weechat.org/security/
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2013:136
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2012-November/092490.html

Scores

EPSS 0.0554
EPSS Percentile 91.9%

Details

CWE
CWE-119
Status published
Products (4)
flashtux/weechat 0.3.6
flashtux/weechat 0.3.7
flashtux/weechat 0.3.8
flashtux/weechat 0.3.9
Published Nov 19, 2012
Tracked Since Feb 18, 2026