CVE-2013-6487: Buffer Overflow
Published Feb 6, 2014
·Updated
Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, which triggers a buffer overflow.
Affected Software
14 affected components
Pidgin Pidgin<=2.10.7
Pidgin Pidgin=2.0.0
Pidgin Pidgin=2.0.1
Pidgin Pidgin=2.0.2
Pidgin Pidgin=2.0.2
Pidgin Pidgin=2.1.0
Pidgin Pidgin=2.1.1
Pidgin Pidgin=2.10.0
Pidgin Pidgin=2.10.1
Pidgin Pidgin=2.10.2
Pidgin Pidgin=2.10.3
Pidgin Pidgin=2.10.4
Pidgin Pidgin=2.10.5
Pidgin Pidgin=2.10.6
Event History
Feb 6, 2014
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Data Sourced
via NVD·05:00 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6487?
CVE-2013-6487 has a medium severity rating due to the potential for remote code execution through a buffer overflow.
2
Which versions of Pidgin are affected by CVE-2013-6487?
CVE-2013-6487 affects Pidgin versions before 2.10.8.
3
How do I fix CVE-2013-6487?
To fix CVE-2013-6487, upgrade Pidgin to version 2.10.8 or later.
4
What type of vulnerability is CVE-2013-6487?
CVE-2013-6487 is an integer overflow vulnerability that can lead to a buffer overflow.
5
Is there a workaround for CVE-2013-6487?
There are no documented workarounds for CVE-2013-6487 other than upgrading to a patched version.