Lucene search
GoogleOSV:CVE-2017-5590HistoryFeb 09, 2017 - 8:59 p.m.
CVE-2017-5590
2017-02-0920:59:00
Google
osv.dev
4
An incorrect implementation of “XEP-0280: Message Carbons” in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application’s display. This allows for various kinds of social engineering attacks. This CVE is for ChatSecure (3.2.0 - 4.0.0; only iOS) and Zom (all versions up to 1.0.11; only iOS).
References
openwall.com/lists/oss-security/2017/02/09/29
www.securityfocus.com/bid/96165
github.com/ChatSecure/ChatSecure-iOS/commit/a340b4bb519227d89f85f2716a10a197a65d4856
github.com/zom/Zom-iOS/commit/880051eaa8ba32d1b257c87a7d8798a93561bfd3
rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/
rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdf
Related
nvd
nvd
CVE-2017-5589
2017-02-09 20:59:00
CVE-2017-5590
2017-02-09 20:59:00
osv
osv
prion
prion
Design/Logic Flaw
2017-02-09 20:59:00
Design/Logic Flaw
2017-02-09 20:59:00
cve
cve
CVE-2017-5589
2017-02-09 20:59:00
CVE-2017-5590
2017-02-09 20:59:00
nessus
nessus
openSUSE Security Update : mcabber (openSUSE-2017-282)
2017-02-22 00:00:00
cvelist
cvelist
CVE-2017-5589
2017-02-09 20:00:00
CVE-2017-5590
2017-02-09 20:00:00
archlinux
archlinux
[ASA-201702-11] kdenetwork-kopete: content spoofing
2017-02-12 00:00:00