CVE-2012-0828

CRITICAL 9.8CVE-2012-0828 · Published 21/02/2020 · updated 16/06/2026

In short

CVE-2012-0828 is a CRITICAL (CVSS 9.8) vulnerability affecting gtk (gnome), xchat-wdk (xchat-wdk), xchat (xchat).
Chance of exploitation in the next 30 days (EPSS): 4.3%, higher than 91.1% of all vulnerabilities.
Fix: update to 1499-4, 2.8.6 or later.

Package	Affected versions	Patched versions
gtk gnome	`= 2.10.4= 2.14.7= 2.18.9= 2.24.7`	No fix yet
xchat-wdk xchat-wdk	`< 1499-4`	`1499-4`
xchat xchat	`< 2.8.6`	`2.8.6`

Description

Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).

References

openwall.com/lists/oss-security/2012/02/01/9 · Mailing List
access.redhat.com/security/cve/cve-2012-0828 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
security-tracker.debian.org/tracker/CVE-2012-0828 · Third Party Advisory

More vulnerabilities in gtk

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

gtk

gnome

= 2.10.4= 2.14.7= 2.18.9= 2.24.7

No fix yet

xchat-wdk

< 1499-4

1499-4

xchat

< 2.8.6

2.8.6

Description

More vulnerabilities in gtk

See all →