First published: Tue Dec 23 2003(Updated: )
The format_send_to_gui function in formats.c for irssi before 0.8.9 allows remote IRC users to cause a denial of service (crash).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Irssi Irssi | =0.8.8 | |
Irssi Irssi | =0.8.7 | |
Irssi Irssi | =0.8.6 | |
Irssi Irssi | =0.8.5 | |
Irssi Irssi | =0.8.4 | |
mandrakesoft mandrake linux | =9.2 | |
mandrakesoft mandrake linux | =9.2 | |
mandrakesoft mandrake linux | =9.1 | |
mandrakesoft mandrake linux | =9.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-1020 is classified as a denial of service vulnerability that can crash irssi.
To mitigate CVE-2003-1020, upgrade irssi to version 0.8.9 or later.
CVE-2003-1020 affects irssi versions 0.8.4 through 0.8.8.
Yes, CVE-2003-1020 can be exploited by remote IRC users to crash the application.
Yes, the patch is included in irssi version 0.8.9 and later.