CVE-2013-4103

Description

References

• packetstormsecurity.com/files/134252/Cryptocat-Script-Insertion.html · Third Party Advisory
• packetstormsecurity.com/files/cve/CVE-2013-4103 · Third Party Advisory
• tobtu.com/decryptocat.php · Product
• openwall.com/lists/oss-security/2013/07/10/15 · Mailing List
• securityfocus.com/bid/61093 · Third Party Advisory

More vulnerabilities in cryptocat

• CVE-2013-4108CRITICAL 9.8Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.
• CVE-2013-4106MEDIUM 6.1A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.
• CVE-2013-4109MEDIUM 6.1An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.
• CVE-2013-4107MEDIUM 6.1Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting
• CVE-2013-4105HIGH 7.5Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure