Multiple buffer overflows in (a) BarnOwl prior to 1.0.5 and (b) owl 2.1.11 allow remote malicious users to execute arbitrary code via vectors involving (1) a crafted zcrypt message, related to zcrypt.c; (2) a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the products.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
barnowl barnowl 1.0.2.1 |
||
barnowl barnowl 1.0.3 |
||
barnowl barnowl |
||
barnowl barnowl 1.0.0 |
||
barnowl barnowl 1.0.4 |
||
barnowl barnowl 1.0.2 |
||
barnowl barnowl 1.0.1 |
||
ktools owl 2.1.11 |
Vulmon