CVE-2010-1156

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

core/nicklist.c in Irssi before 0.8.15 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors related to an attempted fuzzy nick match at the instant that a victim leaves a channel.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Apr 16, 2010
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2010

CVE-2010-11572.6Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by CVE-2010-11585.0Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consuCVE-2010-11596.8Multiple heap-based buffer overflows in Aircrack-ng before 1.1 allow remote attackers to cause a denial of service (crash) and execute arbitCVE-2010-11601.9GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local CVE-2010-11613.7Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to CVE-2010-11627.2The release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the put_pid funcCVE-2010-11636.9The command matching functionality in sudo 1.6.8 through 1.7.2p5 does not properly handle when a file in the current working directory has tCVE-2010-11644.3Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA 3.12 through 4.1 allow remote attackers to inject arbitrary web scriptCVE-2010-11659.0Atlassian JIRA 3.12 through 4.1 allows remote authenticated administrators to execute arbitrary code by modifying the (1) attachment (aka atCVE-2010-11667.1The fbComposite function in fbpict.c in the Render extension in the X server in X.Org X11R7.1 allows remote authenticated users to cause a dCVE-2010-11674.3fetchmail 4.6.3 through 6.3.16, when debug mode is enabled, does not properly handle invalid characters in a multi-character locale, which aCVE-2010-11687.5The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo a
CVE-2010-1156: Medium severity, CVSS 4.3 | Vulnix