VRT-2013-1004 (CVE-2013-6490): Buffer overflow in SIMPLE header parsing
Summary: Cisco Talos documented a buffer overflow in Pidgin 2.10.7's SIMPLE protocol handling, where sipmsg_parse_header() is called from process_input() in simple.c at line 1631. A negative bodylen of -1 makes restlen exceed bodylen, so the allocation of bodylen + 1 evaluates to zero, and because g_malloc returns NULL for a zero-size request, the memcpy writes to the NULL page rather than the heap.
Bottom line: The write lands on the zero page, which Talos notes is exploitable if an attacker can trigger enough allocations to exhaust the memory address range and force the system to map the low page.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Mentions
- CVE-2013-6490
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026