CVE-2006-6811
- State
- Published
- Severity
- Not scored
- Published
- Dec 29, 2006
- Updated
- Aug 7, 2024
- Reserved
- Dec 29, 2006
Description
KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an assertion failure and results in a NULL pointer dereference. NOTE: this issue was originally reported as a buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-409-1vendor-advisory
- https://issues.rpath.com/browse/RPL-922
- 3023exploit
- ADV-2006-5199vdb-entry
- 20070109 [KDE Security Advisory] ksirc Denial of Service vulnerabilitymailing-list
- 21790vdb-entry
- MDKSA-2007:009vendor-advisory
- http://www.kde.org/info/security/advisory-20070109-1.txt
- ksirc-privmsg-bo(31134)vdb-entry
- 33443vdb-entry
- 1017453vdb-entry
- http://www.addict3d.org/index.php?page=viewarticle&trace=0&type=security&ID=8468
- GLSA-200701-26vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.