Approved changes feed: RSS · Atom

cpe:2.3:a:xchat:xchat:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorXchat (470d94f2-cf31-57ed-b22f-a79d4efb9a2f)
ProductXchat (8dcbe0d5-e8b7-556a-89ed-0c3a432ea5ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xchat purl2cpe 2026-06-01 10:11:01.770577
pkg:deb/ubuntu/xchat purl2cpe 2026-06-01 10:11:01.770580
pkg:github/elrina/xchat purl2cpe 2026-06-01 10:11:01.770583
pkg:github/tycho/xchat purl2cpe 2026-06-01 10:11:01.770586
pkg:github/xchataqua/xchat purl2cpe 2026-06-01 10:11:01.770588
pkg:rpm/centos/xchat purl2cpe 2026-06-01 10:11:01.770591
pkg:rpm/opensuse/xchat purl2cpe 2026-06-01 10:11:01.770594
pkg:sourceforge/xchat purl2cpe 2026-06-01 10:11:01.770596

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0828 vulnerable 2026-06-08 05:00:45.691237 Details available
Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could allow remote attackers to cause a denial of service (xchat client crash) or execute arbitrary code via a UTF-8 line from server containing characters outside of the Basic Multilingual Plane (BMP).
Published: 2020-02-21T17:20:43.000Z
Updated: 2024-08-06T18:38:14.795Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-5129 vulnerable 2026-06-08 04:59:34.780838 Details available
Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.
Published: 2012-08-30T22:00:00.000Z
Updated: 2024-08-07T00:23:40.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0315 vulnerable 2026-06-08 04:51:08.837276 Details available
Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2008-5983).
Published: 2009-01-28T11:00:00.000Z
Updated: 2024-08-07T04:31:25.503Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2841 vulnerable 2026-06-08 04:50:32.307164 Details available
Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.
Published: 2008-06-24T19:00:00.000Z
Updated: 2024-08-07T09:14:14.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4455 vulnerable 2026-06-08 04:49:17.968728 Details available
Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via unspecified vectors involving the PRIVMSG command. NOTE: the vendor has disputed this vulnerability, stating that it does not affect 2.6.7 "or any recent version"
Published: 2006-08-30T15:00:00.000Z
Updated: 2024-08-07T19:14:46.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0382 vulnerable 2026-06-08 04:46:21.333379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.