Multiple vulnerabilities in PuTTY

Description

Multiple serious vulnerabilities have been found in PuTTY. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information or possibly execute arbitrary code. Below is a complete list of vulnerabilities

1. An integer overflow can be exploited remotely via a specially designed RSA key;
2. Improper work with memory can be exploited locally;
3. Buffer overflow and underflow can be exploited remotely via a specially designed DSA signature;

Original advisories

Related products

• PuTTY

CVE list

• CVE-2013-4852
  high
• CVE-2013-4207
  high
• CVE-2013-4208
  high
• CVE-2013-4206
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com