CVE-2017-9469 | BDVDB-2026-86204 Detail

Description#

In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one byte before the allocated memory. Thus, remote attackers might be able to cause a crash.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.debian.org/security/2017/dsa-3885
http://openwall.com/lists/oss-security/2017/06/06/4
https://irssi.org/security/irssi_sa_2017_06.txt
http://www.securityfocus.com/bid/99043
http://www.securitytracker.com/id/1038621

Exploit#

No public exploit known

History#

Version 12017-06-07Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.