Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory consumption or application crash) via a very large data size.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chatman | Virtual_projects | 1.0.1_beta (including) | 1.0.1_beta (including) |
| Chatman | Virtual_projects | 1.0.2_beta (including) | 1.0.2_beta (including) |
| Chatman | Virtual_projects | 1.0.3_beta (including) | 1.0.3_beta (including) |
| Chatman | Virtual_projects | 1.0.4_beta (including) | 1.0.4_beta (including) |
| Chatman | Virtual_projects | 1.1.0_beta (including) | 1.1.0_beta (including) |
| Chatman | Virtual_projects | 1.1.1_beta (including) | 1.1.1_beta (including) |
| Chatman | Virtual_projects | 1.1.2_beta (including) | 1.1.2_beta (including) |
| Chatman | Virtual_projects | 1.1.3_beta (including) | 1.1.3_beta (including) |
| Chatman | Virtual_projects | 1.1.4_beta (including) | 1.1.4_beta (including) |
| Chatman | Virtual_projects | 1.1.5_beta (including) | 1.1.5_beta (including) |
| Chatman | Virtual_projects | 1.2.1_beta (including) | 1.2.1_beta (including) |
| Chatman | Virtual_projects | 1.3.0_beta (including) | 1.3.0_beta (including) |
| Chatman | Virtual_projects | 1.3.1_beta (including) | 1.3.1_beta (including) |
| Chatman | Virtual_projects | 1.4.0_beta (including) | 1.4.0_beta (including) |
| Chatman | Virtual_projects | 1.5.0_rc1 (including) | 1.5.0_rc1 (including) |
| Chatman | Virtual_projects | 1.5.1 (including) | 1.5.1 (including) |
References
- http://secunia.com/advisories/12665/
- http://securitytracker.com/id?1011431
- http://www.osvdb.org/10365
- http://www.securityfocus.com/archive/1/376569
- http://www.securityfocus.com/bid/11263
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17513
- http://secunia.com/advisories/12665/
- http://securitytracker.com/id?1011431
- http://www.osvdb.org/10365
- http://www.securityfocus.com/archive/1/376569
- http://www.securityfocus.com/bid/11263
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17513