|
|
| |
|
| |
libotr: code execution
| Package(s): | libotr |
CVE #(s): | CVE-2012-3461
|
| Created: | August 13, 2012 |
Updated: | April 10, 2013 |
| Description: |
From the Debian advisory:
Just Ferguson discovered that libotr, an off-the-record (OTR) messaging
library, can be forced to perform zero-length allocations for heap buffers
that are used in base64 decoding routines. An attacker can exploit this
flaw by sending crafted messages to an application that is using libotr to
perform denial of service attacks or potentially execute arbitrary code. |
| Alerts: |
|
( Log in to post comments)
|
|
|