NVD

Id
41535  
Name
CVE-2013-6487  
Description
Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2014-02-06  
Modified Date
2016-12-21  
Seq
2013-6487  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209938 41535 CVE-2013-6487 http://advisories.mageia.org/MGASA-2014-0074.html  View
209939 41535 CVE-2013-6487 http://hg.pidgin.im/pidgin/main/rev/ec15aa187aa0  View
209940 41535 CVE-2013-6487 http://libgadu.net/releases/1.11.3.html  View
209941 41535 CVE-2013-6487 FEDORA-2014-2391  View
209942 41535 CVE-2013-6487 openSUSE-SU-2014:0239  View
209943 41535 CVE-2013-6487 openSUSE-SU-2014:0326  View
209944 41535 CVE-2013-6487 http://vrt-blog.snort.org/2014/01/vrt-2013-1001-cve-2013-6487-buffer.html  View
209945 41535 CVE-2013-6487 DSA-2852  View
209946 41535 CVE-2013-6487 DSA-2859  View
209947 41535 CVE-2013-6487 MDVSA-2014:039  View
209948 41535 CVE-2013-6487 http://www.pidgin.im/news/security/?id=82  View
209949 41535 CVE-2013-6487 65188  View
209950 41535 CVE-2013-6487 USN-2100-1  View
209951 41535 CVE-2013-6487 USN-2101-1  View
209952 41535 CVE-2013-6487 RHSA-2014:0139  View
209953 41535 CVE-2013-6487 GLSA-201508-02  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24438 JVNDB-2013-006013 Pidgin の Gadu-Gadu パーサの libpurple/protocols/gg/lib/http.c における整数オーバーフローの脆弱性 Pidgin の Gadu-Gadu (gg) パーサの libpurple/protocols/gg/lib/http.c には、整数オーバーフローの脆弱性が存在します。 CVE-2013-6487 66429 CVE-2013-6487 41535 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006013.html 2013-11-25 2015-08-03 View