CVE-2017-5592
09.02.2017, 20:59
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for profanity (0.4.7 - 0.5.0).Enginsight
| Vendor | Product | Version |
|---|---|---|
| profanity_project | profanity | 0.4.7 |
| profanity_project | profanity | 0.4.7:cyg1 |
| profanity_project | profanity | 0.4.7:cyg2 |
| profanity_project | profanity | 0.4.7:cyg3 |
| profanity_project | profanity | 0.4.7:patch1 |
| profanity_project | profanity | 0.5.0 |
| profanity_project | profanity | 0.5.0:rc1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| profanity |
|
Common Weakness Enumeration
References