CVE-2013-4107

Description

References

• tobtu.com/decryptocat.php · Product
• vuldb.com · Permissions Required
• openwall.com/lists/oss-security/2013/07/10/15 · Mailing List
• securityfocus.com/bid/61096 · Third Party Advisory

More vulnerabilities in cryptocat

• CVE-2013-4108CRITICAL 9.8Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.
• CVE-2013-4106MEDIUM 6.1A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.
• CVE-2013-4109MEDIUM 6.1An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.
• CVE-2013-4105HIGH 7.5Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure
• CVE-2013-2260CRITICAL 9.8Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness