CVE-2016-10189
14.03.2017, 14:59
BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list.Enginsight
| Vendor | Product | Version |
|---|---|---|
| bitlbee | bitlbee | 𝑥 ≤ 3.4.2 |
| bitlbee | bitlbee-libpurple | 𝑥 ≤ 3.5 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| bitlbee |
|
Common Weakness Enumeration
References