Description
Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attackers to execute arbitrary code by sending a long message to the client.
References (3)
Core 3
Core References
Third Party Advisory x_refsource_misc
https://tintin.sourceforge.io/forum/viewtopic.php?f=1&t=2584&sid=31b77bb001faea9269bf224280960e29#p10505
Product, Third Party Advisory x_refsource_misc
https://tintin.sourceforge.io/news.php
Exploit, Third Party Advisory x_refsource_misc
https://trustfoundry.net/cve-2019-7629-rce-in-an-open-source-mud-client/
Scores
CVSS v3
9.8
EPSS
0.0538
EPSS Percentile
91.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (2)
tintin\+\+_project/tintin\+\+
2.01.6
tintin\+\+_project/wintin\+\+
2.01.6
Published
Feb 18, 2019
Tracked Since
Feb 18, 2026