Vulnerability in Melange Chat System
CVE-2002-1351
Buffer overflow in Melange Chat System 1.10 allows remote attackers to cause a denial of service (chat server crash) and possibly execute arbitrary code via the msgText buffer in the chat_InterpretData function, as demonstrated via a long Nick (nickname) request.
EPSS: 0.058 (92.3th percentile) — read the EPSS interpretation.
Affected products
- Melange Melange_chat_system — versions 1.10
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)