CVE-2013-4108

Description

References

• tobtu.com/decryptocat.php · Vendor Advisory
• openwall.com/lists/oss-security/2013/07/10/15 · Mailing List

cryptocat의 다른 취약점

• CVE-2013-4106보통 6.1A Cross-site scripting (XSS) vulnerability exists in Conversation Overview Nickname in Cryptocat before 2.0.22.
• CVE-2013-4109보통 6.1An unspecified cross-site scripting (XSS) vulnerability exists in Cryptocat Message Handling 1.1.165.
• CVE-2013-4107보통 6.1Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scripting
• CVE-2013-4105높음 7.5Cryptocat before 2.0.22 has Multiparty Encryption Scheme Information Disclosure
• CVE-2013-2260심각 9.8Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy Weakness