Description
Stack-based buffer overflow in the LiveJournal support (hooks/ljhook.cc) in CenterICQ 4.9.11 through 4.21.0, when using unofficial LiveJournal servers, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by adding the victim as a friend and using long (1) username and (2) real name strings.
References
- 2129 third-party-advisory
- 21932 vdb-entry
- ADV-2007-0306 vdb-entry
- centericq-username-bo(31330) vdb-entry
- GLSA-200701-20 vendor-advisory
- 1017545 vdb-entry
- 20070107 TK53 Advisory #1: CenterICQ remote DoS buffer overflow in LiveJournal handling mailing-list
- 33408 vdb-entry