CVE-2013-7049
ZNC for Windows (znc-msvc) < 0.206 - Stack-based Buffer Overflow via Fish Plugin DH1080_INIT Message
Title source: llmDescription
Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and earlier, allows remote attackers to cause a denial of service (crash) via a long string in a DH1080_INIT message.
References (6)
Core 6
Core References
Issue Tracking x_refsource_confirm
https://code.google.com/p/znc-msvc/
Mailing List mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2013/q4/482
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/89671
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/64254
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/100859
Mailing List mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2013/q4/489
Scores
EPSS
0.0166
EPSS Percentile
73.9%
Details
CWE
CWE-119
Status
published
Products (14)
znc/znc-msvc
0.076
znc/znc-msvc
0.077
znc/znc-msvc
0.078
znc/znc-msvc
0.079
znc/znc-msvc
0.080
znc/znc-msvc
0.089
znc/znc-msvc
0.090
znc/znc-msvc
0.093
znc/znc-msvc
0.094
znc/znc-msvc
0.095
... and 4 more
Published
Dec 23, 2013
Tracked Since
Feb 18, 2026