CVE-2013-6483 in Pidgininfo

Zusammenfassung

von MITRE

The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservieren

04.11.2013

Veröffentlichung

06.02.2014

Moderieren

akzeptiert

Eintrag

VDB-12113

CPE

bereit

EPSS

0.03885

KEV

nein

Aktivitäten

very low

Quellen

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!