CVE-2013-2221: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the ZRtp::storeMsgTemp function in GNU ZRTPCPP before 3.2.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large packet...

CVE-2013-2222: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in GNU ZRTPCPP before 3.2.0 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted ZRTP Hello packet to the 1 ZRtp::findBestSASType, 2 ZRtp::findBestAuthLen, 3 ZRtp::findBestCipher, 4 ZRtp::findBestHash, or...

PT-2013-1258

Name of the Vulnerable Software and Affected Versions libzrtpcpp versions prior to 3.2.0 GNU ZRTPCPP versions prior to 3.2.0 Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely, potentially allowing attackers to...

Several Flaws Discovered in ZRTPCPP Library Used in Secure Phone Apps

A security researcher has uncovered a number of serious vulnerabilities in one of the core security components of several secure telephony applications, including the Silent Circle system developed by PGP creator Phil Zimmermann. The vulnerabilities in the GNU ZRTPCPP library already have been...