CVE-2013-4852
PuTTY 0.62 Heap Overflow
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.
Desbordamiento de entero en PuTTY 0.62 y anteriores, WinSCP anterior a 5.1.6, y otros productos que usan PuTTY, permite a servidores SSH remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código arbitrario en determinadas aplicaciones que utilizan PuTTY a través de un tamaño negativo en el valor de la firma en la clave RSA durante el handshake SSH, que provoca un desbordamiento basado en memoria dinámica.
Multiple vulnerabilities have been found in FileZilla, the worst of which could result in arbitrary code execution. Versions less than 3.7.3 are affected.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-07-16 CVE Reserved
- 2013-08-06 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-189: Numeric Errors
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=718779 | X_refsource_confirm | |
| http://secunia.com/advisories/54517 | Third Party Advisory | |
| http://secunia.com/advisories/54533 | Third Party Advisory | |
| http://svn.tartarus.org/sgt?view=revision&sortby=date&revision=9896 | X_refsource_misc | |
| http://winscp.net/tracker/show_bug.cgi?id=1017 | X_refsource_misc | |
| http://www.search-lab.hu/advisories/secadv-20130722 | X_refsource_misc |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | <= 5.1.5 Search vendor "Winscp" for product "Winscp" and version " <= 5.1.5" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 3.7.6 Search vendor "Winscp" for product "Winscp" and version "3.7.6" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 3.8.2 Search vendor "Winscp" for product "Winscp" and version "3.8.2" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 3.8_beta Search vendor "Winscp" for product "Winscp" and version "3.8_beta" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.0.4 Search vendor "Winscp" for product "Winscp" and version "4.0.4" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.0.5 Search vendor "Winscp" for product "Winscp" and version "4.0.5" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.2.6 Search vendor "Winscp" for product "Winscp" and version "4.2.6" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.2.7 Search vendor "Winscp" for product "Winscp" and version "4.2.7" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.2.8 Search vendor "Winscp" for product "Winscp" and version "4.2.8" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.2.9 Search vendor "Winscp" for product "Winscp" and version "4.2.9" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.3.2 Search vendor "Winscp" for product "Winscp" and version "4.3.2" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.3.4 Search vendor "Winscp" for product "Winscp" and version "4.3.4" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.3.5 Search vendor "Winscp" for product "Winscp" and version "4.3.5" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.3.6 Search vendor "Winscp" for product "Winscp" and version "4.3.6" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.3.7 Search vendor "Winscp" for product "Winscp" and version "4.3.7" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.3.8 Search vendor "Winscp" for product "Winscp" and version "4.3.8" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.3.9 Search vendor "Winscp" for product "Winscp" and version "4.3.9" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 4.4.0 Search vendor "Winscp" for product "Winscp" and version "4.4.0" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.0 Search vendor "Winscp" for product "Winscp" and version "5.0" | beta |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.0.1 Search vendor "Winscp" for product "Winscp" and version "5.0.1" | beta |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.0.2 Search vendor "Winscp" for product "Winscp" and version "5.0.2" | beta |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.0.3 Search vendor "Winscp" for product "Winscp" and version "5.0.3" | beta |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.0.4 Search vendor "Winscp" for product "Winscp" and version "5.0.4" | beta |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.0.5 Search vendor "Winscp" for product "Winscp" and version "5.0.5" | beta |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.0.6 Search vendor "Winscp" for product "Winscp" and version "5.0.6" | beta |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.0.7 Search vendor "Winscp" for product "Winscp" and version "5.0.7" | beta |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.0.8 Search vendor "Winscp" for product "Winscp" and version "5.0.8" | rc |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.0.9 Search vendor "Winscp" for product "Winscp" and version "5.0.9" | rc |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.1 Search vendor "Winscp" for product "Winscp" and version "5.1" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.1.1 Search vendor "Winscp" for product "Winscp" and version "5.1.1" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.1.2 Search vendor "Winscp" for product "Winscp" and version "5.1.2" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.1.3 Search vendor "Winscp" for product "Winscp" and version "5.1.3" | - |
Affected
| ||||||
| Winscp Search vendor "Winscp" | Winscp Search vendor "Winscp" for product "Winscp" | 5.1.4 Search vendor "Winscp" for product "Winscp" and version "5.1.4" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 6.0 Search vendor "Debian" for product "Debian Linux" and version "6.0" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 7.0 Search vendor "Debian" for product "Debian Linux" and version "7.0" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 7.1 Search vendor "Debian" for product "Debian Linux" and version "7.1" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Opensuse Search vendor "Opensuse" for product "Opensuse" | 12.3 Search vendor "Opensuse" for product "Opensuse" and version "12.3" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.45 Search vendor "Putty" for product "Putty" and version "0.45" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.46 Search vendor "Putty" for product "Putty" and version "0.46" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.47 Search vendor "Putty" for product "Putty" and version "0.47" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.48 Search vendor "Putty" for product "Putty" and version "0.48" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.49 Search vendor "Putty" for product "Putty" and version "0.49" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.50 Search vendor "Putty" for product "Putty" and version "0.50" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.51 Search vendor "Putty" for product "Putty" and version "0.51" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.52 Search vendor "Putty" for product "Putty" and version "0.52" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.53b Search vendor "Putty" for product "Putty" and version "0.53b" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.54 Search vendor "Putty" for product "Putty" and version "0.54" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.55 Search vendor "Putty" for product "Putty" and version "0.55" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.56 Search vendor "Putty" for product "Putty" and version "0.56" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.57 Search vendor "Putty" for product "Putty" and version "0.57" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.58 Search vendor "Putty" for product "Putty" and version "0.58" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.59 Search vendor "Putty" for product "Putty" and version "0.59" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.60 Search vendor "Putty" for product "Putty" and version "0.60" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 0.61 Search vendor "Putty" for product "Putty" and version "0.61" | - |
Affected
| ||||||
| Putty Search vendor "Putty" | Putty Search vendor "Putty" for product "Putty" | 2010-06-01 Search vendor "Putty" for product "Putty" and version "2010-06-01" | r8967, development_snapshot |
Affected
| ||||||
| Simon Tatham Search vendor "Simon Tatham" | Putty Search vendor "Simon Tatham" for product "Putty" | <= 0.62 Search vendor "Simon Tatham" for product "Putty" and version " <= 0.62" | - |
Affected
| ||||||
| Simon Tatham Search vendor "Simon Tatham" | Putty Search vendor "Simon Tatham" for product "Putty" | 0.53 Search vendor "Simon Tatham" for product "Putty" and version "0.53" | - |
Affected
| ||||||