CVE-2013-6490 1

VRT-2013-1004 (CVE-2013-6490): Buffer overflow in SIMPLE header parsing

Cyber Risks Cisco Talos

Cisco Talos documented a buffer overflow in Pidgin 2.10.7's SIMPLE protocol handling, where sipmsg_parse_header() is called from process_input() in simple.c at line 1631. A negative bodylen of -1 makes restlen exceed bodylen, so the allocation of bodylen +...

Malware