CVE-2010-2725

BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:barnowl:barnowl:*:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.2.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.2:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.3:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.4:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.4:rc1:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.5:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.5:rc1:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.5:rc2:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.5.1:*:*:*:*:*:*:*
cpe:2.3:a:barnowl:barnowl:1.6:*:*:*:*:*:*:*

History

21 Nov 2024, 01:17

Type Values Removed Values Added
References () http://barnowl.mit.edu/wiki/release-notes/1.6.2 - Vendor Advisory () http://barnowl.mit.edu/wiki/release-notes/1.6.2 - Vendor Advisory
References () http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog - () http://github.com/barnowl/barnowl/blob/barnowl-1.6.2/ChangeLog -

Information

Published : 2010-08-05 13:23

Updated : 2024-11-21 01:17


NVD link : CVE-2010-2725

Mitre link : CVE-2010-2725

CVE.ORG link : CVE-2010-2725


JSON object : View

Products Affected

barnowl

  • barnowl
CWE
CWE-20

Improper Input Validation