CVE-2012-3461: Buffer Overflow
First published: Tue Aug 07 2012(Updated: )
Multiple heap-based buffer overflow flaws were found in the way the Base64 decoder of libotr, an Off-The-Record Messaging library and toolkit, performed decoding of certain messages. A remote attacker could provide a specially-crafted OTR message that once processed in an application linked against libotr would lead to that application crash or, potentially, arbitrary code execution with the privileges of the user running the application. References: [1] <a href="http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684121">http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684121</a> [2] <a href="http://lists.cypherpunks.ca/pipermail/otr-dev/2012-July/001347.html">http://lists.cypherpunks.ca/pipermail/otr-dev/2012-July/001347.html</a> Relevant upstream patches: [3] <a href="http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=b17232f86f8e60d0d22caf9a2400494d3c77da58">http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=b17232f86f8e60d0d22caf9a2400494d3c77da58</a> [4] <a href="http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=6d4ca89cf1d3c9a8aff696c3a846ac5a51f762c1">http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=6d4ca89cf1d3c9a8aff696c3a846ac5a51f762c1</a> [5] <a href="http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=1902baee5d4b056850274ed0fa8c2409f1187435">http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=1902baee5d4b056850274ed0fa8c2409f1187435</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cypherpunks Libotr | <=3.2.0 | |
| Cypherpunks Libotr | =3.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=684121
- http://lists.cypherpunks.ca/pipermail/otr-dev/2012-July/001347.html
- http://lists.cypherpunks.ca/pipermail/otr-dev/2012-July/001348.html
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00019.html
- http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr%3Ba=commitdiff%3Bh=1902baee5d4b056850274ed0fa8c2409f1187435
- http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr%3Ba=commitdiff%3Bh=6d4ca89cf1d3c9a8aff696c3a846ac5a51f762c1
- http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr%3Ba=commitdiff%3Bh=b17232f86f8e60d0d22caf9a2400494d3c77da58
- http://www.debian.org/security/2012/dsa-2526
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:131
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:097
- http://www.securityfocus.com/bid/54907
- http://www.ubuntu.com/usn/USN-1541-1
- https://bugzilla.redhat.com/show_bug.cgi?id=846377
- https://exchange.xforce.ibmcloud.com/vulnerabilities/77528
- http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=b17232f86f8e60d0d22caf9a2400494d3c77da58
- http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=6d4ca89cf1d3c9a8aff696c3a846ac5a51f762c1
- http://otr.git.sourceforge.net/git/gitweb.cgi?p=otr/libotr;a=commitdiff;h=1902baee5d4b056850274ed0fa8c2409f1187435
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=846380
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=846381
- https://admin.fedoraproject.org/updates/libotr-3.2.0-7.fc16
- https://admin.fedoraproject.org/updates/libotr-3.2.0-8.fc17
- https://access.redhat.com/security/cve/CVE-2012-3461
- http://www.openwall.com/lists/oss-security/2012/08/08/3
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=846377#c4
- https://admin.fedoraproject.org/updates/libotr-3.2.0-5.el6
- https://admin.fedoraproject.org/updates/libotr-3.2.0-2.el5
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- collector/redhat-bugzilla
- alias/CVE-2012-3461
- vendor/cypherpunks
- canonical/cypherpunks libotr
- version/cypherpunks libotr/3.2.0
- version/cypherpunks libotr/3.1.0