Is CVE-2013-4852 actively exploited?

CVE-2013-4852 has no public evidence of in-the-wild exploitation as of 2026-04-29.

What is the CVSS score for CVE-2013-4852?

CVE-2013-4852 has a CVSS score of 6.8 (UNKNOWN severity). Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P.

How do I patch CVE-2013-4852?

Patch guidance is available from winscp security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2013-4852.

CVE-2013-4852 - remediation guidance & executive summary

Q: Which products are affected by CVE-2013-4852?

57 products: winscp winscp, winscp winscp, winscp winscp, winscp winscp, winscp winscp, and 52 more.

Description

Integer overflow in PuTTY 0.62 and earlier, WinSCP before 5.1.6, and other products that use PuTTY allows remote SSH servers to cause a denial of service (crash) and possibly execute arbitrary code in certain applications that use PuTTY via a negative size value in an RSA key signature during the SSH handshake, which triggers a heap-based buffer overflow.

CVSS Metrics

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector: network
Access Cmplx: medium
Auth: none
Confidentiality: partial
Integrity: partial
Availability: partial
Weaknesses: CWE-189

Metadata

Primary Vendor: WINSCP
Published: 8/19/2013
Last Modified: 4/29/2026
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

winscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpwinscp : winscpdebian : debian_linuxdebian : debian_linuxdebian : debian_linuxopensuse : opensuseputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttyputty : puttysimon_tatham : puttysimon_tatham : putty

Remediation Guidance

Executive Summary

Cite this page

CVE-2013-4852. CVEDatabase.com. Retrieved 1 May 2026. https://cvedatabase.com/cve/CVE-2013-4852

View on NIST NVD

CVE-2013-4852 vulnerability