CVE-2012-5854

HIGH 7.5CVE-2012-5854 · Published 19/11/2012 · updated 16/06/2026

In short

CVE-2012-5854 is a HIGH (CVSS 7.5) vulnerability affecting weechat (flashtux).
Chance of exploitation in the next 30 days (EPSS): 5.5%, higher than 92.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
weechat flashtux	`= 0.3.6= 0.3.7= 0.3.8= 0.3.9`	No fix yet

Description

Heap-based buffer overflow in WeeChat 0.3.6 through 0.3.9 allows remote attackers to cause a denial of service (crash or hang) and possibly execute arbitrary code via crafted IRC colors that are not properly decoded.

References

lists.fedoraproject.org/pipermail/package-announce/2012-November/092228.html
lists.fedoraproject.org/pipermail/package-announce/2012-November/092490.html
lists.fedoraproject.org/pipermail/package-announce/2012-November/092536.html
lists.opensuse.org/opensuse-security-announce/2013-01/msg00018.html
lists.opensuse.org/opensuse-updates/2012-11/msg00087.html
osvdb.org/87279
secunia.com/advisories/51377
weechat.org/security · Vendor Advisory
mandriva.com/security/advisories
openwall.com/lists/oss-security/2012/11/12/2
securityfocus.com/bid/56482
savannah.nongnu.org/bugs
wiki.mageia.org/en/Support/Advisories/MGASA-2012-0330

More vulnerabilities in weechat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free