CVE-2017-5604

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for mcabber 1.0.0 - 1.0.4.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:mcabber:mcabber:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:mcabber:mcabber:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:mcabber:mcabber:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:mcabber:mcabber:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:mcabber:mcabber:1.0.4:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-02-09 20:59

Updated : 2024-02-04 19:11


NVD link : CVE-2017-5604

Mitre link : CVE-2017-5604

CVE.ORG link : CVE-2017-5604


JSON object : View

Products Affected

mcabber

  • mcabber
CWE
CWE-20

Improper Input Validation

CWE-346

Origin Validation Error