Vulnetix
Try Vulnetix Request Demo
CVE-2013-6483 PUBLISHED CVSS 6.400000095367432 MEDIUM

The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.

EPSS 0.86% · 75.0th percentile

Risk Scores

CVSS v2.0
6.400000095367432
EPSS Score
0.86%
75.0th percentile

Affected Products

VendorProductVersions
n/an/an/a
pidginpidgin0, 2.0.0, 2.0.1

Timeline

References

Open in Interactive Console →