CVE-2013-4109

概要

参考情報

• tobtu.com/decryptocat.php · Vendor Advisory
• vuldb.com/es · Permissions Required
• openwall.com/lists/oss-security/2013/07/10/15 · Mailing List
• securityfocus.com/bid/61097 · Third Party Advisory

cryptocat のその他の脆弱性

• CVE-2013-4108緊急 9.8Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors.
• CVE-2013-4106中 6.1A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.
• CVE-2013-4107中 6.1Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting
• CVE-2013-4105高 7.5Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure
• CVE-2013-2260緊急 9.8Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness