hexchat project records

3 published records for vendor hexchat project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2016-2233Proof of concept	Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denialhexchat project · hexchat · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	34.1%	Jan 18, 2017
32Monitor	CVE-2016-2087Proof of concept	Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a ..hexchat project · hexchat · CWE-22 Pre-auth Path traversal	High7.4	—	9.4%	Jan 18, 2017
26Monitor	CVE-2013-7449No exploit	The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matxchat · xchat · CWE-310 Pre-auth	Medium6.5	—	0.7%	Apr 21, 2016

CVE-2016-2233
40Plan
Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial
HighCVSS 7.5Proof of conceptEPSS 34%
hexchat project · hexchatJan 18, 2017
CVE-2016-2087
32Monitor
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a ..
HighCVSS 7.4Proof of conceptEPSS 9%
- Pre-auth
- Path traversal
hexchat project · hexchatJan 18, 2017
CVE-2013-7449
26Monitor
The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname mat
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
xchat · xchatApr 21, 2016