Candidate: CVE-2019-7629 PublicDate: 2019-02-18 20:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7629 https://tintin.sourceforge.io/forum/viewtopic.php?f=1&t=2584&sid=31b77bb001faea9269bf224280960e29#p10505 https://tintin.sourceforge.io/news.php https://trustfoundry.net/cve-2019-7629-rce-in-an-open-source-mud-client/ Description: Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attackers to execute arbitrary code by sending a long message to the client. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H [9.8 CRITICAL] Patches_tintin++: upstream_tintin++: released (2.01.7) precise/esm_tintin++: DNE trusty_tintin++: ignored (reached end-of-life) trusty/esm_tintin++: DNE (trusty was needs-triage) xenial_tintin++: ignored (end of standard support, was needs-triage) bionic_tintin++: needs-triage cosmic_tintin++: ignored (reached end-of-life) disco_tintin++: ignored (reached end-of-life) eoan_tintin++: released (2.01.5-2) focal_tintin++: released (2.01.5-2) groovy_tintin++: released (2.01.5-2) hirsute_tintin++: released (2.01.5-2) impish_tintin++: released (2.01.5-2) jammy_tintin++: released (2.01.5-2) devel_tintin++: released (2.01.5-2)