UBUNTU-CVE-2013-4852

Dashboard / Vulnerabilities / UBUNTU-CVE-2013-4852

UBUNTU-CVE-2013-4852

Summary:

Details: Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.

References: https://ubuntu.com/security/CVE-2013-4852, http://www.securityfocus.com/archive/1/527763/30/0, http://svn.tartarus.org/sgt?view=revision&sortby=date&revision=9896, https://www.cve.org/CVERecord?id=CVE-2013-4852