CVE-2013-7049: Buffer Overflow
Published Dec 23, 2013
·Updated
Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and earlier, allows remote attackers to cause a denial of service (crash) via a long string in a DH1080INIT message.
Affected Software
14 affected components
ZNC Znc-msvc Windows<=0.206
ZNC Znc-msvc Windows=0.076
ZNC Znc-msvc Windows=0.077
ZNC Znc-msvc Windows=0.078
ZNC Znc-msvc Windows=0.079
ZNC Znc-msvc Windows=0.080
ZNC Znc-msvc Windows=0.089
ZNC Znc-msvc Windows=0.090
ZNC Znc-msvc Windows=0.093
ZNC Znc-msvc Windows=0.094
ZNC Znc-msvc Windows=0.095
ZNC Znc-msvc Windows=0.097
ZNC Znc-msvc Windows=0.098
ZNC Znc-msvc Windows=0.202
Event History
Dec 23, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Data Sourced
via NVD·11:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-7049?
CVE-2013-7049 has a severity rating of medium due to the potential for denial of service.
2
How do I fix CVE-2013-7049?
To fix CVE-2013-7049, upgrade ZNC for Windows past version 0.206 to ensure the vulnerability is patched.
3
What does CVE-2013-7049 exploit?
CVE-2013-7049 exploits a stack-based buffer overflow in the Fish plugin for ZNC.
4
Who is affected by CVE-2013-7049?
Users of ZNC for Windows versions 0.206 and earlier are affected by CVE-2013-7049.
5
What type of attack does CVE-2013-7049 enable?
CVE-2013-7049 enables remote attackers to cause a denial of service via a crafted DH1080_INIT message.