CVE Feed

    Dashboard / CVE / CVE-2003-1000

    CVE-2003-1000

    xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an invalid ID number, which causes a null dereference.

    Published:Dec 17, 2003
    Last Modified:Apr 16, 2026
    EPS:Dec 17, 2003
    EPSS Score:0.01114
    CVSS Score:7.5

    Affected Products

    Vendor
    Xchat
    Product
    Xchat

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2013-7449 (CVSS 6.5) — The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verif…
    CVE-2011-5129 (CVSS 5) — Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (cr…
    CVE-2012-0828 (CVSS 9.8) — Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could all…
    CVE-2009-0315 (CVSS 6.9) — Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code…
    CVE-2008-2841 (CVSS 6.8) — Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allow…
    CVE-2006-4455 (CVSS 5) — Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (cra…
    CVE-2004-0409 (CVSS 7.5) — Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled,…
    CVE-2002-0382 (CVSS 7.5) — XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS …
    CVE-2002-0006 (CVSS 7.5) — XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execu…
    CVE-2001-0792 (CVSS 7.5) — Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed n…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High