CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1864

The Portable Tool Library (aka PTLib) before 2.10.10, as used in Ekiga before 4.0.1, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted PXML document containing a large number of nested entity references, aka a "billion laughs attack."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.038

EPSS Ranking 87.5%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2013-1864

Ekiga » Ekiga » Version: 3.2.2

cpe:2.3:a:ekiga:ekiga:3.2.2
Ekiga » Ekiga » Version: 3.2.3

cpe:2.3:a:ekiga:ekiga:3.2.3
Ekiga » Ekiga » Version: 3.2.4

cpe:2.3:a:ekiga:ekiga:3.2.4
Ekiga » Ekiga » Version: 3.2.5

cpe:2.3:a:ekiga:ekiga:3.2.5
Ekiga » Ekiga » Version: 3.2.6

cpe:2.3:a:ekiga:ekiga:3.2.6
Ekiga » Ekiga » Version: 3.3.0

cpe:2.3:a:ekiga:ekiga:3.3.0
Ekiga » Ekiga » Version: 3.3.1

cpe:2.3:a:ekiga:ekiga:3.3.1
Ekiga » Ekiga » Version: 4.0.0

cpe:2.3:a:ekiga:ekiga:4.0.0
Opalvoip » Portable Tool Library » Version: 2.10.1

cpe:2.3:a:opalvoip:portable_tool_library:2.10.1
Opalvoip » Portable Tool Library » Version: 2.10.2

cpe:2.3:a:opalvoip:portable_tool_library:2.10.2
Opalvoip » Portable Tool Library » Version: 2.10.7

cpe:2.3:a:opalvoip:portable_tool_library:2.10.7
Opalvoip » Portable Tool Library » Version: 2.10.9

cpe:2.3:a:opalvoip:portable_tool_library:2.10.9
Suse » Suse Linux Enterprise Software Development Kit » Version: 11.0

cpe:2.3:a:suse:suse_linux_enterprise_software_development_kit:11.0
Suse » Suse Linux Enterprise Desktop » Version: 11.0

cpe:2.3:o:suse:suse_linux_enterprise_desktop:11.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-1864

Products

Pricing

Contact Us