34 results · Feed
-
Medium 5.3
Irssi 1.3.x and 1.4.x before 1.4.4 has a use-after-free because of use of a stale special collector reference. This occ…
-
Unscored —
Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP.
-
Unscored —
Irssi before 1.0.8, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, when SASL is enabled, has a use after free when sending…
-
Unscored —
Irssi 1.1.x before 1.1.2 has a use after free when hidden lines are expired from the scroll buffer.
-
Unscored —
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. A NULL pointer dereference occurs for an "empty" …
-
Unscored —
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. When the number of windows exceeds the available …
-
Unscored —
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when a server is discon…
-
Unscored —
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. There is a use-after-free when SASL messages are …
-
Unscored —
An issue was discovered in Irssi before 1.0.7 and 1.1.x before 1.1.1. Certain nick names could result in out-of-bounds …
-
Unscored —
When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.
-
Unscored —
When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string.
-
Unscored —
When using incomplete escape codes, Irssi before 1.0.6 may access data beyond the end of the string.
-
Unscored —
In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing ce…
-
Unscored —
Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the en…
-
Unscored —
In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is …
-
Unscored —
Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels fr…
-
Unscored —
In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the…
-
Unscored —
In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message.
-
Unscored —
An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the G…
-
Unscored —
An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to der…
-
Unscored —
In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer…
-
Unscored —
In Irssi before 1.0.3, when receiving certain incorrectly quoted DCC files, it tries to find the terminating quote one …
-
Unscored —
The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and pos…
-
Unscored —
Irssi 0.8.17 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a cr…
-
Unscored —
Use-after-free vulnerability in Irssi before 0.8.21 allows remote attackers to cause a denial of service (crash) via an…
-
Unscored —
Irssi 0.8.18 before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via vect…
-
Unscored —
Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string co…
-
Unscored —
The nickcmp function in Irssi before 0.8.21 allows remote attackers to cause a denial of service (NULL pointer derefere…
-
Unscored —
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created betwe…
-
Unscored —
The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enab…
-
Unscored —
The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a de…
-
Unscored —
core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference a…
-
Unscored —
Irssi before 0.8.15, when SSL is used, does not verify that the server hostname matches a domain name in the subject's …
-
Unscored —CVE-2009-1959 Public exploit
Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers t…