CVE-1999-0672: Buffer overflow in Fujitsu Chocoa IRC client via IRC channel topics.

Security readout for executives and security teams

A very old flaw in Fujitsu's Chocoa IRC client could crash or hijack the program when it joined a chat channel with a specially crafted topic line. Chocoa is a legacy Japanese-language chat application with no meaningful modern deployment. For today's enterprise, the business impact is negligible unless a user still runs this obsolete client on a corporate endpoint. Extremely limited. Chocoa is an obsolete late-1990s Japanese IRC client with no expected footprint in modern managed environments. Exposure would require a user to still run this specific application and connect to an attacker-controlled or compromised IRC channel. Low priority. Treat as legacy-inventory hygiene rather than an active threat. Fold any remediation into normal obsolete-software cleanup; no incident-level response is warranted based on the cited sources. Mitigation focus: Inventory endpoints for any Fujitsu Chocoa IRC client installs and remove them.; Block or restrict outbound IRC (typically TCP 6660-6669, 6697) at the perimeter if not business-required.; Standardize on supported, maintained chat clients for any legitimate IRC use..

Prepared

Jul 12, 2026, 01:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.