CVE-2013-4852: Buffer Overflow
Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4852?
CVE-2013-4852 is classified as a high-severity vulnerability due to its potential for denial of service and possible arbitrary code execution.
How do I fix CVE-2013-4852?
To fix CVE-2013-4852, you should upgrade to the latest version of PuTTY or WinSCP that is not affected by this vulnerability.
What products are impacted by CVE-2013-4852?
CVE-2013-4852 affects PuTTY versions 0.62 and earlier, as well as multiple versions of WinSCP prior to 5.1.6.
What types of attacks can exploit CVE-2013-4852?
CVE-2013-4852 can be exploited by remote SSH servers to crash affected applications or potentially execute arbitrary code.
What is the nature of the vulnerability in CVE-2013-4852?
CVE-2013-4852 involves an integer overflow vulnerability that occurs during RSA key signature processing.