CVE-2016-2851
CriticalSummary
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.
Risk Assessment
Attackers can exploit this vulnerability to remotely crash the application or execute malicious code, posing a serious security threat to the system.
Recommendation
It is recommended to update libotr to version 4.1.1 or later to mitigate this vulnerability and to monitor systems for suspicious activity.
Original NVD description (English source)
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.