Arbitrary code execution in Irssi - CVE-2016-7044

Vulnerability identifier: #VU632

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2016-7044

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to cause arbitrary code execution on the target system.
The weakness exists due to input validation error. Having tricked the victim into loading specially crafted file attackers can invoke a buffer overflow in format_send_to_gui() and execute arbitrary code.
Successful exploitation of the vulnerability results in arbitrary code execution on the vulnerable system.

Irssi
Debian Linux
Fedora
Slackware Linux
Ubuntu
irssi (Alpine package)
irssi

Update to 0.8.20.

irssi (Alpine package) - update to 0.8.20-r0
irssi - addressed in versions 0.8.20-1.el5.1, 0.8.20-1.fc23, 0.8.20-1.fc24, 0.8.20-1.fc25

• https://irssi.org/security/irssi_sa_2016.txt

• Ubuntu update for Irssi
• Debian update for irssi
• Slackware Linux update for irssi
• Arbitrary code execution in irssi (Alpine package)
• Fedora 25 update for irssi
• Fedora 24 update for irssi
• Fedora 23 update for irssi
• Fedora EPEL 5 update for irssi