[ MDVSA-2009:133 ] irssi

[dude67]

_______________________________________________________________________

Package : irssi
Date : June 16, 2009
Affected: 2008.1, 2009.0, 2009.1, Corporate 3.0
_______________________________________________________________________

Problem Description:

A vulnerability has been found and corrected in irssi:

Off-by-one error in the event_wallops function in
fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers
to cause a denial of service (crash) via an empty command, which
triggers a one-byte buffer under-read and a one-byte buffer underflow
(CVE-2009-1959).

This update provides fixes for this vulnerability.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-1959
_______________________________________________________________________