Lucene search

K
cveRedhatCVE-2013-6490
HistoryFeb 06, 2014 - 5:00 p.m.

CVE-2013-6490

2014-02-0617:00:06
CWE-119
redhat
web.nvd.nist.gov
43
pidgin
buffer overflow
cve-2013-6490
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.016

Percentile

87.4%

The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow.

Affected configurations

Nvd
Node
pidginpidginRange2.10.7
OR
pidginpidginMatch2.0.0
OR
pidginpidginMatch2.0.1
OR
pidginpidginMatch2.0.2
OR
pidginpidginMatch2.1.0
OR
pidginpidginMatch2.1.1
OR
pidginpidginMatch2.2.0
OR
pidginpidginMatch2.2.1
OR
pidginpidginMatch2.2.2
OR
pidginpidginMatch2.3.0
OR
pidginpidginMatch2.3.1
OR
pidginpidginMatch2.4.0
OR
pidginpidginMatch2.4.1
OR
pidginpidginMatch2.4.2
OR
pidginpidginMatch2.4.3
OR
pidginpidginMatch2.5.0
OR
pidginpidginMatch2.5.1
OR
pidginpidginMatch2.5.2
OR
pidginpidginMatch2.5.3
OR
pidginpidginMatch2.5.4
OR
pidginpidginMatch2.5.5
OR
pidginpidginMatch2.5.6
OR
pidginpidginMatch2.5.7
OR
pidginpidginMatch2.5.8
OR
pidginpidginMatch2.5.9
OR
pidginpidginMatch2.6.0
OR
pidginpidginMatch2.6.1
OR
pidginpidginMatch2.6.2
OR
pidginpidginMatch2.6.3
OR
pidginpidginMatch2.6.4
OR
pidginpidginMatch2.6.5
OR
pidginpidginMatch2.6.6
OR
pidginpidginMatch2.7.0
OR
pidginpidginMatch2.7.1
OR
pidginpidginMatch2.7.2
OR
pidginpidginMatch2.7.3
OR
pidginpidginMatch2.7.4
OR
pidginpidginMatch2.7.5
OR
pidginpidginMatch2.7.6
OR
pidginpidginMatch2.7.7
OR
pidginpidginMatch2.7.8
OR
pidginpidginMatch2.7.9
OR
pidginpidginMatch2.7.10
OR
pidginpidginMatch2.7.11
OR
pidginpidginMatch2.8.0
OR
pidginpidginMatch2.9.0
OR
pidginpidginMatch2.10.0
OR
pidginpidginMatch2.10.1
OR
pidginpidginMatch2.10.2
OR
pidginpidginMatch2.10.3
OR
pidginpidginMatch2.10.4
OR
pidginpidginMatch2.10.5
OR
pidginpidginMatch2.10.6
VendorProductVersionCPE
pidginpidgin*cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*
pidginpidgin2.0.0cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*
pidginpidgin2.0.1cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*
pidginpidgin2.0.2cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*
pidginpidgin2.1.0cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*
pidginpidgin2.1.1cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*
pidginpidgin2.2.0cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*
pidginpidgin2.2.1cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*
pidginpidgin2.2.2cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*
pidginpidgin2.3.0cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*
Rows per page:
1-10 of 531

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.016

Percentile

87.4%