CVE ID:	CVE-2013-6483
Description:	The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remote attackers to spoof iq traffic or cause a denial of service (NULL pointer dereference and application crash) via a crafted reply.
Test IDs:	1.3.6.1.4.1.25623.1.0.702859   1.3.6.1.4.1.25623.1.0.123472
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6483 Debian Security Information: DSA-2859 (Google Search) http://www.debian.org/security/2014/dsa-2859 RedHat Security Advisories: RHSA-2014:0139 https://rhn.redhat.com/errata/RHSA-2014-0139.html SuSE Security Announcement: openSUSE-SU-2014:0239 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-02/msg00039.html SuSE Security Announcement: openSUSE-SU-2014:0326 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-03/msg00005.html http://www.ubuntu.com/usn/USN-2100-1