CVE-2013-6485
CVE-2013-6485
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid chunk-size field in chunked transfer-coding data.
EPSS 2.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html
- http://pidgin.im/news/security/?id=80
- https://rhn.redhat.com/errata/RHSA-2014-0139.html
- http://www.debian.org/security/2014/dsa-2859
- http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html
- http://www.securityfocus.com/bid/65243
- http://www.ubuntu.com/usn/USN-2100-1
- http://hg.pidgin.im/pidgin/main/rev/c9e5aba2dafd
- https://nvd.nist.gov/vuln/detail/CVE-2013-6485