Unichat Unhandled Character Set Denial of Service Vulnerability

Bugtraq ID:	8962
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 03 2003 12:00AM
Updated:	Nov 03 2003 12:00AM
Credit:	This vulnerability was reported by DarkKnight <[email protected]>.
Vulnerable:	Unichat Unichat
Not Vulnerable:

Unichat Unhandled Character Set Denial of Service Vulnerability

It has been reported that the Unichat client fails to handle specific characters under default conditions. If an unhandled character is encountered, the client will crash. An attacker could exploit this condition by modifying the characteristics of their Unichat client and connecting to an arbitrary server.

Unichat Unhandled Character Set Denial of Service Vulnerability

No exploit is required. However, a modified u2res000.rit file has been supplied and can be found in the attached message reference (Unichat Vulnerabilities).

Unichat Unhandled Character Set Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Unichat Unhandled Character Set Denial of Service Vulnerability

References:

• Unichat (Unichat)
  
• Unichat Vulnerabilities (DarkKnight )