CVE Feed

    Dashboard / CVE / CVE-2012-0828

    CVE-2012-0828

    Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).

    Published:Jan 17, 2012
    Last Modified:Nov 21, 2024
    EPS:Feb 21, 2020
    EPSS Score:0.05888
    CVSS Score:9.8

    Affected Products

    Vendor
    Gnome
    Product
    Gtk
    Vendor
    Xchat
    Product
    Xchat
    Vendor
    Xchat-wdk
    Product
    Xchat-wdk

    Exploits

    No exploit reference

    Related CVEs

    CVE-2014-1949 (CVSS 7.2) — GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows ph…
    CVE-2010-4833 (CVSS 9.3) — Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows loca…
    CVE-2010-4831 (CVSS 6.9) — Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to …
    CVE-2010-0732 (CVSS 6.2) — gdk/gdkwindow.c in GTK+ before 2.18.5, as used in gnome-screensaver before 2.28.1, performs implicit paints on…
    CVE-2007-0010 (CVSS 2.1) — The GdkPixbufLoader function in GIMP ToolKit (GTK+) in GTK 2 (gtk2) before 2.4.13 allows context-dependent att…
    CVE-2005-2975 (CVSS 7.8) — io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial…
    CVE-2005-2976 (CVSS 7.5) — Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of s…
    CVE-2005-0891 (CVSS 7.5) — Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (c…
    CVE-2005-0372 (CVSS 5) — Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read a…
    CVE-2004-0788 (CVSS 5) — Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High