CVE Feed

    Dashboard / CVE / CVE-2011-5129

    CVE-2011-5129

    Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.

    Published:Aug 30, 2012
    Last Modified:Apr 11, 2025
    EPS:Aug 30, 2012
    EPSS Score:0.24054
    CVSS Score:5

    Affected Products

    Vendor
    Xchat
    Product
    Xchat

    Exploits

    http://packetstormsecurity.org/files/107312/xchat-dos.txthttp://www.exploit-db.com/exploits/18159http://www.securityfocus.com/bid/50820http://packetstormsecurity.org/files/107312/xchat-dos.txthttp://www.exploit-db.com/exploits/18159http://www.securityfocus.com/bid/50820https://www.exploit-db.com/exploits/18159

    Related CVEs

    CVE-2013-7449 (CVSS 6.5) — The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verif…
    CVE-2012-0828 (CVSS 9.8) — Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could all…
    CVE-2009-0315 (CVSS 6.9) — Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code…
    CVE-2008-2841 (CVSS 6.8) — Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allow…
    CVE-2006-4455 (CVSS 5) — Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (cra…
    CVE-2004-0409 (CVSS 7.5) — Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled,…
    CVE-2003-1000 (CVSS 7.5) — xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an inv…
    CVE-2002-0382 (CVSS 7.5) — XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS …
    CVE-2002-0006 (CVSS 7.5) — XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execu…
    CVE-2001-0792 (CVSS 7.5) — Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed n…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High