Exploitation Summary
EIP tracks 1 public exploit for CVE-2016-2851. PoCs published by X41 D-Sec GmbH.
AI-analyzed exploit summary This PoC exploits an integer overflow in libotr leading to a heap overflow, allowing remote code execution or denial of service by sending a large OTR message. The vulnerability is triggered by a 32-bit integer wrap-around during memory allocation, causing out-of-bounds data copy.
Description
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.
Exploits (1)
This PoC exploits an integer overflow in libotr leading to a heap overflow, allowing remote code execution or denial of service by sending a large OTR message. The vulnerability is triggered by a 32-bit integer wrap-around during memory allocation, causing out-of-bounds data copy.
References (11)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H