Buffer Overflow Vulnerability in Pidgin Affected by MXIT Protocol
CVE-2016-2378

8.1HIGH

Key Information:

Vendor

Pidgin

Status
Pidgin
Vendor
CVE Published:
6 January 2017

What is CVE-2016-2378?

A buffer overflow vulnerability has been identified in Pidgin's MXIT protocol handling. This issue allows a malicious server or user to send specially crafted data containing negative length values, leading to potential memory corruption within the application. This vulnerability poses a risk as it could be exploited to execute arbitrary code or crash the application, emphasizing the importance of applying security updates and using safe network practices.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Pidgin 2.10.11

References

http://www.pidgin.im/news/security/?id=94
x_refsource_CONFIRM
http://www.securityfocus.com/bid/91335
vdb-entryx_refsource_BID
http://www.talosintelligence.com/reports/TALOS-2016-0120/
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.