CVE-2013-4207: Buffer Overflow
Buffer overflow in sshbn.c in PuTTY before 0.63 allows remote SSH servers to cause a denial of service (crash) via an invalid DSA signature that is not properly handled during computation of a modular inverse and triggers the overflow during a division by zero by the bignum functionality, a different vulnerability than CVE-2013-4206.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4207?
The severity of CVE-2013-4207 is classified as high due to its potential to cause a denial of service.
How do I fix CVE-2013-4207?
To fix CVE-2013-4207, update PuTTY to version 0.63 or later which addresses the buffer overflow issue.
What software is affected by CVE-2013-4207?
CVE-2013-4207 affects various versions of PuTTY prior to 0.63 including versions 0.45 through 0.62.
What is the exploit type for CVE-2013-4207?
CVE-2013-4207 exploits a buffer overflow vulnerability that can lead to application crashes.
Can CVE-2013-4207 be exploited remotely?
Yes, CVE-2013-4207 can be exploited remotely by sending an invalid DSA signature to vulnerable PuTTY versions.