CVE-2013-6490

high · 10

The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow.

CVSS

14.8%

EPSS (exploit prob.)

97th

EPSS percentile

2014-02-06

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
pidgin	pidgin	<= 2.10.7
pidgin	pidgin	2.0.0
pidgin	pidgin	2.0.1
pidgin	pidgin	2.0.2
pidgin	pidgin	2.1.0
pidgin	pidgin	2.1.1
pidgin	pidgin	2.2.0
pidgin	pidgin	2.2.1
pidgin	pidgin	2.2.2
pidgin	pidgin	2.3.0
pidgin	pidgin	2.3.1
pidgin	pidgin	2.4.0
pidgin	pidgin	2.4.1
pidgin	pidgin	2.4.2
pidgin	pidgin	2.4.3
pidgin	pidgin	2.5.0
pidgin	pidgin	2.5.1
pidgin	pidgin	2.5.2
pidgin	pidgin	2.5.3
pidgin	pidgin	2.5.4
pidgin	pidgin	2.5.5
pidgin	pidgin	2.5.6
pidgin	pidgin	2.5.7
pidgin	pidgin	2.5.8
pidgin	pidgin	2.5.9
pidgin	pidgin	2.6.0
pidgin	pidgin	2.6.1
pidgin	pidgin	2.6.2
pidgin	pidgin	2.6.3
pidgin	pidgin	2.6.4
pidgin	pidgin	2.6.5
pidgin	pidgin	2.6.6
pidgin	pidgin	2.7.0
pidgin	pidgin	2.7.1
pidgin	pidgin	2.7.2
pidgin	pidgin	2.7.3
pidgin	pidgin	2.7.4
pidgin	pidgin	2.7.5
pidgin	pidgin	2.7.6
pidgin	pidgin	2.7.7

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-6490