CVE-2013-4109

Description

References

• tobtu.com/decryptocat.php · Vendor Advisory
• vuldb.com/es · Permissions Required
• openwall.com/lists/oss-security/2013/07/10/15 · Mailing List
• securityfocus.com/bid/61097 · Third Party Advisory

More vulnerabilities in cryptocat

• CVE-2013-4108CRITICAL 9.8Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.
• CVE-2013-4106MEDIUM 6.1A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.
• CVE-2013-4107MEDIUM 6.1Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting
• CVE-2013-4105HIGH 7.5Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure
• CVE-2013-2260CRITICAL 9.8Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness