Buffer Overflow Vulnerability in WeeChat IRC Plugin

CVE-2017-8073 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This occurs in the irc_ctcp_dcc_filename_without_quotes function during quote removal, with a buffer overflow.

Learn more about our Web Application Penetration Testing UK.