CVE-2013-7049

EUVD-2013-6848
Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and earlier, allows remote attackers to cause a denial of service (crash) via a long string in a DH1080_INIT message.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
Affected Products (NVD)
VendorProductVersion
zncznc-msvc
𝑥
≤ 0.206
zncznc-msvc
0.076
zncznc-msvc
0.077
zncznc-msvc
0.078
zncznc-msvc
0.079
zncznc-msvc
0.080
zncznc-msvc
0.089
zncznc-msvc
0.090
zncznc-msvc
0.093
zncznc-msvc
0.094
zncznc-msvc
0.095
zncznc-msvc
0.097
zncznc-msvc
0.098
zncznc-msvc
0.202
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/100859
http://seclists.org/oss-sec/2013/q4/482
http://seclists.org/oss-sec/2013/q4/489
http://www.securityfocus.com/bid/64254
https://code.google.com/p/znc-msvc/
https://exchange.xforce.ibmcloud.com/vulnerabilities/89671
http://osvdb.org/100859
http://seclists.org/oss-sec/2013/q4/482
http://seclists.org/oss-sec/2013/q4/489
http://www.securityfocus.com/bid/64254
https://code.google.com/p/znc-msvc/
https://exchange.xforce.ibmcloud.com/vulnerabilities/89671