CVE-2012-0828
Critical
Description
Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).
SeverityCritical
CVSS9.8
Exploit probability—
ProductXchat
PublishedFeb 21, 2020
First seenFeb 21, 2020
How to fix
Update
- xchat xchat2.8.6 or later
- xchat-wdk xchat-wdk1499-4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xchat xchat | v < 2.8.6 | 2.8.6 |
| gnome gtk | 2.10.4, 2.14.7, 2.18.9, 2.24.7 | — |
| xchat-wdk xchat-wdk | v < 1499-4 | 1499-4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.