CVE-2009-0661 - Vulnerability Details - OpenCVE

Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Flashtux	Weechat

Configuration 1 [-]

cpe:2.3:a:flashtux:weechat:0.2.6:*:*:*:*:*:*:*

No data.

References

Link	Providers

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940
http://osvdb.org/52763
http://savannah.nongnu.org/bugs/index.php?25862
http://secunia.com/advisories/34304
http://secunia.com/advisories/34328
http://weechat.flashtux.org/
http://www.debian.org/security/2009/dsa-1744
http://www.openwall.com/lists/oss-security/2009/03/17/8
http://www.securityfocus.com/bid/34148
http://www.vupen.com/english/advisories/2009/0758
https://exchange.xforce.ibmcloud.com/vulnerabilities/49295

History

Thu, 22 May 2025 04:30:00 +0000

Type	Values Removed	Values Added
References	https://nvd.nist.gov/vuln/detail/CVE-2009-0661 https://www.cve.org/CVERecord?id=CVE-2009-0661

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-03-19T10:00:00

Updated: 2024-08-07T04:40:05.127Z

Reserved: 2009-02-22T00:00:00

Link: CVE-2009-0661

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2009-03-19T10:30:00.390

Modified: 2025-04-09T00:30:58.490

Link: CVE-2009-0661

Redhat

Severity : Moderate

Publid Date: 2009-03-14T00:00:00Z

Links: CVE-2009-0661 - Bugzilla

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-03-14T00:00:00", "descriptions": [{"lang": "en", "value": "Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://savannah.nongnu.org/bugs/index.php?25862"}, {"name": "34148", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/34148"}, {"name": "34304", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/34304"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://weechat.flashtux.org/"}, {"name": "52763", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/52763"}, {"name": "ADV-2009-0758", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/0758"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940"}, {"name": "DSA-1744", "tags": ["vendor-advisory", "x_refsource_DEBIAN"], "url": "http://www.debian.org/security/2009/dsa-1744"}, {"name": "weechat-ircmessage-dos(49295)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49295"}, {"name": "34328", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/34328"}, {"name": "[oss-security] 20090317 Re: CVE request -- firefox, vlc, WeeChat", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://www.openwall.com/lists/oss-security/2009/03/17/8"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2009-0661", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://savannah.nongnu.org/bugs/index.php?25862", "refsource": "CONFIRM", "url": "http://savannah.nongnu.org/bugs/index.php?25862"}, {"name": "34148", "refsource": "BID", "url": "http://www.securityfocus.com/bid/34148"}, {"name": "34304", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/34304"}, {"name": "http://weechat.flashtux.org/", "refsource": "CONFIRM", "url": "http://weechat.flashtux.org/"}, {"name": "52763", "refsource": "OSVDB", "url": "http://osvdb.org/52763"}, {"name": "ADV-2009-0758", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/0758"}, {"name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940", "refsource": "CONFIRM", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940"}, {"name": "DSA-1744", "refsource": "DEBIAN", "url": "http://www.debian.org/security/2009/dsa-1744"}, {"name": "weechat-ircmessage-dos(49295)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49295"}, {"name": "34328", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/34328"}, {"name": "[oss-security] 20090317 Re: CVE request -- firefox, vlc, WeeChat", "refsource": "MLIST", "url": "http://www.openwall.com/lists/oss-security/2009/03/17/8"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T04:40:05.127Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://savannah.nongnu.org/bugs/index.php?25862"}, {"name": "34148", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/34148"}, {"name": "34304", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/34304"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://weechat.flashtux.org/"}, {"name": "52763", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/52763"}, {"name": "ADV-2009-0758", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2009/0758"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940"}, {"name": "DSA-1744", "tags": ["vendor-advisory", "x_refsource_DEBIAN", "x_transferred"], "url": "http://www.debian.org/security/2009/dsa-1744"}, {"name": "weechat-ircmessage-dos(49295)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49295"}, {"name": "34328", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/34328"}, {"name": "[oss-security] 20090317 Re: CVE request -- firefox, vlc, WeeChat", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2009/03/17/8"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-0661", "datePublished": "2009-03-19T10:00:00", "dateReserved": "2009-02-22T00:00:00", "dateUpdated": "2024-08-07T04:40:05.127Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:flashtux:weechat:0.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "DC44B684-89A2-4A6E-8BC1-98C3C7B6A0FA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Wee Enhanced Environment for Chat (WeeChat) 0.2.6 allows remote attackers to cause a denial of service (crash) via an IRC PRIVMSG command containing crafted color codes that trigger an out-of-bounds read."}, {"lang": "es", "value": "Wee Enhanced Environment for Chat (WeeChat) versi\u00f3n 0.2.6, permite a los atacantes remotos causar una denegaci\u00f3n de servicio (bloqueo) por medio de un comando PRIVMSG IRC que contiene c\u00f3digos de color dise\u00f1ados que desencadenan una lectura fuera de l\u00edmites."}], "id": "CVE-2009-0661", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-03-19T10:30:00.390", "references": [{"source": "[email protected]", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940"}, {"source": "[email protected]", "url": "http://osvdb.org/52763"}, {"source": "[email protected]", "url": "http://savannah.nongnu.org/bugs/index.php?25862"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/34304"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/34328"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "http://weechat.flashtux.org/"}, {"source": "[email protected]", "url": "http://www.debian.org/security/2009/dsa-1744"}, {"source": "[email protected]", "url": "http://www.openwall.com/lists/oss-security/2009/03/17/8"}, {"source": "[email protected]", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/34148"}, {"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2009/0758"}, {"source": "[email protected]", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49295"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519940"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/52763"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://savannah.nongnu.org/bugs/index.php?25862"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/34304"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/34328"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://weechat.flashtux.org/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.debian.org/security/2009/dsa-1744"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2009/03/17/8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/34148"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2009/0758"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49295"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "[email protected]", "type": "Primary"}]}