VULNERABILITY INTELLIGENCE

CVE-2013-6483

CVSS score6.4 MEDIUM
EPSS probability3.89%
CISA KEVNot currently listed
Published2014-02-06
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P

Description

The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references