CVE-2007-1503 in Rhapsody IRCinfo

Summary

Multiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code via format string specifiers to the create_ctcp_message function using the message argument to the (1) me or (2) ctcp commands, and possibly related vectors involving the (3) whois, (4) mode, and (5) topic commands.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

03/19/2007

Entries

3: VDB-85471

CPE

ready

CVSS

5.3

EPSS

0.02369

Activities

Very Low

Sources

Do you need the next level of professionalism?

Upgrade your account now!