[ GLSA 200904-04 ] WeeChat: Denial of Service

[GLSA]

Gentoo Linux Security Advisory

Title: WeeChat: Denial of Service (GLSA 200904-04)
Severity: normal
Exploitable: remote
Date: April 04, 2009
Bug(s): #262997
ID: 200904-04

Synopsis

A processing error in WeeChat might lead to a Denial of Service.

Background

Wee Enhanced Environment for Chat (WeeChat) is a light and extensible console IRC client.

Affected Packages

Package: net-irc/weechat
Vulnerable: < 0.2.6.1
Unaffected: >= 0.2.6.1
Architectures: All supported architectures


Description

Sebastien Helleu reported an array out-of-bounds error in the colored message handling.

Impact

A remote attacker could send a specially crafted PRIVMSG command, possibly leading to a Denial of Service (application crash).

Workaround

There is no known workaround at this time.

Resolution

All WeeChat users should upgrade to the latest version: