Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Cypherpunks Clear all filters
TI-2016-02392 CVE-2016-2851 · GHSA-p3jg-fm9x-hc9c

Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote…

Priority MEDIUM 63

Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR me…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.24283 Published 2016-04-07 No fix listed CWE-119
TI-2012-02989 CVE-2012-3461 · GHSA-gwfv-2hfv-wqmr

The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and…

Priority LOW 26

The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept_data functions in src/proto.c; and (4) decode function in toolkit/parse.c in libotr before 3.2.1 allocates a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03441 Published 2012-08-20 No fix listed CWE-119
TI-2012-02098 CVE-2012-2369 · GHSA-qv74-54r8-p8x7

Format string vulnerability in the log_message_cb function in otr-plugin.c in the…

Priority LOW 39

Format string vulnerability in the log_message_cb function in otr-plugin.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 3.2.1 for Pidgin might allow remote attackers to execute arbitrary code via format…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03522 Published 2012-05-23 No fix listed CWE-134