CVE-2010-2725

Published Aug 4, 2010 CVSS 2.0 · 7.5 High EPSS 2.9% KEV · Not listed
Description
BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2102-1 New barnowl packages fix arbitrary code execution
EUVD EUVD EUVD-2010-2729 BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Sep 16, 2024, 6:44 PM
Reserved
Jul 14, 2010, 12:00 AM
Status
Modified
Published
Aug 5, 2010, 1:23 PM
Modified
Jun 16, 2026, 11:21 PM