Lucene search
RedhatCVE-2013-6486HistoryFeb 06, 2014 - 4:10 p.m.
CVE-2013-6486
2014-02-0616:10:58
CWE-20
redhat
web.nvd.nist.gov
35
cve-2013-6486
pidgin
windows
remote code execution
url handling
vulnerability
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.2
Confidence
Low
EPSS
0.017
Percentile
88.2%
gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled during construction of an explorer.exe command. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3185.
Affected configurations
Node
pidginpidginRange≤2.10.7
ORpidginpidginMatch2.0.0
ORpidginpidginMatch2.0.1
ORpidginpidginMatch2.0.2
ORpidginpidginMatch2.1.0
ORpidginpidginMatch2.1.1
ORpidginpidginMatch2.2.0
ORpidginpidginMatch2.2.1
ORpidginpidginMatch2.2.2
ORpidginpidginMatch2.3.0
ORpidginpidginMatch2.3.1
ORpidginpidginMatch2.4.0
ORpidginpidginMatch2.4.1
ORpidginpidginMatch2.4.2
ORpidginpidginMatch2.4.3
ORpidginpidginMatch2.5.0
ORpidginpidginMatch2.5.1
ORpidginpidginMatch2.5.2
ORpidginpidginMatch2.5.3
ORpidginpidginMatch2.5.4
ORpidginpidginMatch2.5.5
ORpidginpidginMatch2.5.6
ORpidginpidginMatch2.5.7
ORpidginpidginMatch2.5.8
ORpidginpidginMatch2.5.9
ORpidginpidginMatch2.6.0
ORpidginpidginMatch2.6.1
ORpidginpidginMatch2.6.2
ORpidginpidginMatch2.6.3
ORpidginpidginMatch2.6.4
ORpidginpidginMatch2.6.5
ORpidginpidginMatch2.6.6
ORpidginpidginMatch2.7.0
ORpidginpidginMatch2.7.1
ORpidginpidginMatch2.7.2
ORpidginpidginMatch2.7.3
ORpidginpidginMatch2.7.4
ORpidginpidginMatch2.7.5
ORpidginpidginMatch2.7.6
ORpidginpidginMatch2.7.7
ORpidginpidginMatch2.7.8
ORpidginpidginMatch2.7.9
ORpidginpidginMatch2.7.10
ORpidginpidginMatch2.7.11
ORpidginpidginMatch2.8.0
ORpidginpidginMatch2.9.0
ORpidginpidginMatch2.10.0
ORpidginpidginMatch2.10.1
ORpidginpidginMatch2.10.2
ORpidginpidginMatch2.10.3
ORpidginpidginMatch2.10.4
ORpidginpidginMatch2.10.5
ORpidginpidginMatch2.10.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| pidgin | pidgin | * | cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:* |
| pidgin | pidgin | 2.0.0 | cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:* |
| pidgin | pidgin | 2.0.1 | cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:* |
| pidgin | pidgin | 2.0.2 | cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:* |
| pidgin | pidgin | 2.1.0 | cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:* |
| pidgin | pidgin | 2.1.1 | cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:* |
| pidgin | pidgin | 2.2.0 | cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:* |
| pidgin | pidgin | 2.2.1 | cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:* |
| pidgin | pidgin | 2.2.2 | cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:* |
| pidgin | pidgin | 2.3.0 | cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2013-6486
2014-02-06 16:10:58
CVE-2011-3185
2011-08-29 17:55:01
ubuntucve
ubuntucve
CVE-2013-6486
2014-02-06 00:00:00
CVE-2011-3185
2011-08-29 00:00:00
prion
prion
Command injection
2014-02-06 16:10:00
Code injection
2011-08-29 17:55:00
debiancve
debiancve
CVE-2013-6486
2014-02-06 16:10:58
CVE-2011-3185
2011-08-29 17:55:01
cvelist
cvelist
CVE-2013-6486
2014-02-06 15:00:00
CVE-2011-3185
2011-08-29 17:00:00
talos
talos
Pidgin for Windows URL Handling Remote Code Execution Vulnerability
2014-01-26 00:00:00
cve
cve
CVE-2011-3185
2011-08-29 17:55:01
openvas
openvas
Pidgin Multiple Vulnerabilities (Feb 2014) - Windows
2014-02-14 00:00:00
nessus
nessus
Pidgin < 2.10.0 Multiple Vulnerabilities
2011-08-22 00:00:00
securityvulns
securityvulns
Pidgin code execution
2011-08-30 00:00:00
kaspersky
kaspersky
KLA10433 Multiple vulnerabilities in Pidgin
2014-06-02 00:00:00
slackware
slackware
pidgin
2014-02-03 13:58:20
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.2
Confidence
Low
EPSS
0.017
Percentile
88.2%
Related for CVE-2013-6486