AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2013-6483

MEDIUM · CVSS 6.4 EPSS 3.89%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-02-06 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.4. It may be remotely exploitable. It may lead to a denial-of-service condition.

CVE
CVE-2013-6483
Severity
MEDIUM
CVSS
6.4
EPSS
3.89%

Original NVD Description

The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.