CVE-2013-2257

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Cryptocat before 2.0.42 has Group Chat ECC Private Key Generation Brute Force Weakness

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-307

Affected software

VendorProductVersions
CryptocatCryptocatbefore 2.0.42

References

Timeline

Published
Nov 4, 2019
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-22585.3Cryptocat before 2.0.22 has Nickname User ImpersonationCVE-2013-22599.8Cryptocat before 2.0.22 has Arbitrary Code Execution on Firefox Conversation OverviewCVE-2013-22609.8Cryptocat before 2.0.22: Cryptocat.random() Function Array Key has Entropy WeaknessCVE-2013-22617.5Cryptocat before 2.0.22 Chrome Extension 'img/keygen.gif' has Information DisclosureCVE-2013-22627.5Cryptocat strophe.js before 2.0.22 has information disclosureCVE-2013-22635.0Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 allows remote attackers to access network resoCVE-2013-22645.0The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15CVE-2013-22667.8libdns in ISC BIND 9.7.x and 9.8.x before 9.8.4-P2, 9.8.5 before 9.8.5b2, 9.9.x before 9.9.2-P2, and 9.9.3 before 9.9.3b2 on UNIX platforms CVE-2013-22677.2PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the sysCVE-2013-22687.5Unspecified vulnerability in the MathML implementation in WebKit in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.CVE-2013-22695.0The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7CVE-2013-22704.3Cross-site scripting (XSS) vulnerability in the administration page in Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 allows remote attacker
CVE-2013-2257: High severity, CVSS 7.5 | Vulnix