0IRC IRC Client Null Pointer Dereference Remote Denial of Service Vulnerability

Bugtraq ID:	23101
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Mar 22 2007 12:00AM
Updated:	Mar 22 2007 08:53PM
Credit:	Discovery is credited to DiGitalX.
Vulnerable:	dev0.de 0irc 1345 build 20060823
Not Vulnerable:

0IRC IRC Client Null Pointer Dereference Remote Denial of Service Vulnerability

0irc is prone to a remote denial-of-service vulnerability.

The issue arises when the client handles excessive string data. By exploiting this issue, a remote attacker may cause an affected client to crash.

0irc version 1345 build 20060823 is vulnerable to this issue; other versions may also be affected.

0IRC IRC Client Null Pointer Dereference Remote Denial of Service Vulnerability

Proof-of-concept exploit code is available.

• /data/vulnerabilities/exploits/23101.c

0IRC IRC Client Null Pointer Dereference Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

0IRC IRC Client Null Pointer Dereference Remote Denial of Service Vulnerability

References:

• 0irc web Site (0irc)