Summary | Remote crash parsing HTTP responses |
---|---|
Date | 2014-01-28 |
CVE Number | CVE-2013-6479 |
Discovered By | Jacob Appelbaum of the Tor Project |
Fixed In Release | 2.10.8 |
A malicious server or man-in-the-middle could send a malformed HTTP response that could lead to a crash.
Validate response before using it.