A vulnerability has been identified in Visual IRC (ViRC), which could be exploited by remote attackers to cause a denial of service or execute arbitrary code. This issue is caused by a buffer overflow error when processing overly long responses to "JOIN" commands, which could be exploited by attackers to compromise an affected system by tricking a user into connecting to a malicious IRC server.

Affected Products

Visual IRC (ViRC) version 2.0 and prior

Solution

VUPEN Security is not aware of any vendor-supplied patch.

References

http://www.vupen.com/english/advisories/2007/2467

Credits

Vulnerability reported by Krystian Kloskowski.

Changelog

2007-07-09 : Initial release

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.