CVE-2013-6489
CVE-2013-6489
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (segmentation fault) via a crafted emoticon value, which triggers an integer overflow and a buffer overflow.
EPSS 5.8% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.pidgin.im/news/security/?id=83
- https://rhn.redhat.com/errata/RHSA-2014-0139.html
- http://www.debian.org/security/2014/dsa-2859
- http://www.securityfocus.com/bid/65192
- http://www.ubuntu.com/usn/USN-2100-1
- http://hg.pidgin.im/pidgin/main/rev/4c897372b5a4
- https://nvd.nist.gov/vuln/detail/CVE-2013-6489