[arch-security] [ASA-201609-20] irssi: arbitrary code execution
Jelle van der Waa
jelle at archlinux.org
Thu Sep 22 09:37:02 UTC 2016
Arch Linux Security Advisory ASA-201609-20
Date : 2016-09-22
CVE-ID : CVE-2016-7045
Package : irssi
Type : arbitrary code execution
Remote : Yes
Link : https://wiki.archlinux.org/index.php/CVE
The package irssi before version 0.8.20-1 is vulnerable to arbitrary
Upgrade to 0.8.20-1.
# pacman -Syu "irssi>=0.8.20-1"
The problem has been fixed upstream in version 0.8.20.
The format_send_to_gui() function does not validate the length of the string
before incrementing the `ptr' pointer in all cases.
If that happens, the pointer `ptr' can be incremented twice and thus end past
the boundaries of the original `dup' buffer.
Remote code execution might be difficult since only Nuls are written.
A remote attacker can perform a denial of service attack or possibly execute
arbitrary code on the affected host.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 455 bytes
Desc: not available
More information about the arch-security