Security Advisory
CVE-2016-2851
9.8
CRITICAL
Vulnerability Description
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.
Published Date
April 7, 2016
Official Source
NIST NVD Advisory